bettertls

bettertls::nameconstraints::tc0

Testcase 0 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1

Testcase 1 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2

Testcase 2 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3

Testcase 3 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4

Testcase 4 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5

Testcase 5 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6

Testcase 6 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7

Testcase 7 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8

Testcase 8 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9

Testcase 9 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc10

Testcase 10 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc11

Testcase 11 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc12

Testcase 12 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc13

Testcase 13 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc14

Testcase 14 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc15

Testcase 15 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc16

Testcase 16 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc17

Testcase 17 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc18

Testcase 18 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc19

Testcase 19 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc20

Testcase 20 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc21

Testcase 21 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc22

Testcase 22 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc23

Testcase 23 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc24

Testcase 24 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc25

Testcase 25 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc26

Testcase 26 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc27

Testcase 27 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc28

Testcase 28 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc29

Testcase 29 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc30

Testcase 30 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc31

Testcase 31 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc32

Testcase 32 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc33

Testcase 33 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc34

Testcase 34 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc35

Testcase 35 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc36

Testcase 36 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc37

Testcase 37 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc38

Testcase 38 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc39

Testcase 39 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc40

Testcase 40 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc41

Testcase 41 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc42

Testcase 42 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc43

Testcase 43 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc44

Testcase 44 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc45

Testcase 45 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc46

Testcase 46 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc47

Testcase 47 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc48

Testcase 48 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc49

Testcase 49 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc50

Testcase 50 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc51

Testcase 51 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc52

Testcase 52 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc53

Testcase 53 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc54

Testcase 54 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc55

Testcase 55 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc56

Testcase 56 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc57

Testcase 57 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc58

Testcase 58 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc59

Testcase 59 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc60

Testcase 60 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc61

Testcase 61 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc62

Testcase 62 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc63

Testcase 63 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc64

Testcase 64 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc65

Testcase 65 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc66

Testcase 66 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc67

Testcase 67 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc68

Testcase 68 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc69

Testcase 69 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc70

Testcase 70 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc71

Testcase 71 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc72

Testcase 72 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc73

Testcase 73 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc74

Testcase 74 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc75

Testcase 75 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc76

Testcase 76 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc77

Testcase 77 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc78

Testcase 78 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc79

Testcase 79 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc80

Testcase 80 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc81

Testcase 81 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc82

Testcase 82 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc83

Testcase 83 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc84

Testcase 84 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc85

Testcase 85 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc86

Testcase 86 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc87

Testcase 87 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc88

Testcase 88 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc89

Testcase 89 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc90

Testcase 90 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc91

Testcase 91 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc92

Testcase 92 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc93

Testcase 93 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc94

Testcase 94 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc95

Testcase 95 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc96

Testcase 96 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc97

Testcase 97 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc98

Testcase 98 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc99

Testcase 99 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc100

Testcase 100 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc101

Testcase 101 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc102

Testcase 102 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc103

Testcase 103 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc104

Testcase 104 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc105

Testcase 105 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc106

Testcase 106 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc107

Testcase 107 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc108

Testcase 108 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc109

Testcase 109 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc110

Testcase 110 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc111

Testcase 111 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc112

Testcase 112 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc113

Testcase 113 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc114

Testcase 114 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc115

Testcase 115 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc116

Testcase 116 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc117

Testcase 117 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc118

Testcase 118 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc119

Testcase 119 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc120

Testcase 120 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc121

Testcase 121 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc122

Testcase 122 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc123

Testcase 123 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc124

Testcase 124 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc125

Testcase 125 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc126

Testcase 126 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc127

Testcase 127 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc128

Testcase 128 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc129

Testcase 129 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc130

Testcase 130 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc131

Testcase 131 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc132

Testcase 132 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc133

Testcase 133 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc134

Testcase 134 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc135

Testcase 135 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc136

Testcase 136 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc137

Testcase 137 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc138

Testcase 138 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc139

Testcase 139 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc140

Testcase 140 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc141

Testcase 141 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc142

Testcase 142 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc143

Testcase 143 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc144

Testcase 144 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc145

Testcase 145 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc146

Testcase 146 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc147

Testcase 147 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc148

Testcase 148 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc149

Testcase 149 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc150

Testcase 150 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc151

Testcase 151 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc152

Testcase 152 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc153

Testcase 153 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc154

Testcase 154 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc155

Testcase 155 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc156

Testcase 156 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc157

Testcase 157 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc158

Testcase 158 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc159

Testcase 159 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc160

Testcase 160 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc161

Testcase 161 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc162

Testcase 162 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc163

Testcase 163 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc164

Testcase 164 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc165

Testcase 165 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc166

Testcase 166 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc167

Testcase 167 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc168

Testcase 168 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc169

Testcase 169 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc170

Testcase 170 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc171

Testcase 171 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc172

Testcase 172 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc173

Testcase 173 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc174

Testcase 174 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc175

Testcase 175 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc176

Testcase 176 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc177

Testcase 177 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc178

Testcase 178 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc179

Testcase 179 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc180

Testcase 180 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc181

Testcase 181 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc182

Testcase 182 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc183

Testcase 183 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc184

Testcase 184 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc185

Testcase 185 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc186

Testcase 186 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc187

Testcase 187 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc188

Testcase 188 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc189

Testcase 189 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc190

Testcase 190 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc191

Testcase 191 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc192

Testcase 192 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc193

Testcase 193 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc194

Testcase 194 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc195

Testcase 195 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc196

Testcase 196 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc197

Testcase 197 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc198

Testcase 198 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc199

Testcase 199 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc200

Testcase 200 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc201

Testcase 201 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc202

Testcase 202 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc203

Testcase 203 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc204

Testcase 204 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc205

Testcase 205 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc206

Testcase 206 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc207

Testcase 207 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc208

Testcase 208 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc209

Testcase 209 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc210

Testcase 210 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc211

Testcase 211 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc212

Testcase 212 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc213

Testcase 213 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc214

Testcase 214 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc215

Testcase 215 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc216

Testcase 216 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc217

Testcase 217 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc218

Testcase 218 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc219

Testcase 219 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc220

Testcase 220 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc221

Testcase 221 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc222

Testcase 222 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc223

Testcase 223 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc224

Testcase 224 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc225

Testcase 225 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc226

Testcase 226 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc227

Testcase 227 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc228

Testcase 228 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc229

Testcase 229 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc230

Testcase 230 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc231

Testcase 231 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc232

Testcase 232 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc233

Testcase 233 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc234

Testcase 234 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc235

Testcase 235 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc236

Testcase 236 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc237

Testcase 237 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc238

Testcase 238 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc239

Testcase 239 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc240

Testcase 240 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc241

Testcase 241 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc242

Testcase 242 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc243

Testcase 243 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc244

Testcase 244 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc245

Testcase 245 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc246

Testcase 246 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc247

Testcase 247 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc248

Testcase 248 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc249

Testcase 249 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc250

Testcase 250 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc251

Testcase 251 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc252

Testcase 252 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc253

Testcase 253 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc254

Testcase 254 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc255

Testcase 255 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc256

Testcase 256 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc257

Testcase 257 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc258

Testcase 258 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc259

Testcase 259 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc260

Testcase 260 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc261

Testcase 261 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc262

Testcase 262 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc263

Testcase 263 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc264

Testcase 264 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc265

Testcase 265 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc266

Testcase 266 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc267

Testcase 267 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc268

Testcase 268 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc269

Testcase 269 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc270

Testcase 270 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc271

Testcase 271 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc272

Testcase 272 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc273

Testcase 273 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc274

Testcase 274 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc275

Testcase 275 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc276

Testcase 276 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc277

Testcase 277 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc278

Testcase 278 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc279

Testcase 279 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc280

Testcase 280 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc281

Testcase 281 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc282

Testcase 282 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc283

Testcase 283 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc284

Testcase 284 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc285

Testcase 285 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc286

Testcase 286 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc287

Testcase 287 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc288

Testcase 288 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc289

Testcase 289 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc290

Testcase 290 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc291

Testcase 291 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc292

Testcase 292 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc293

Testcase 293 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc294

Testcase 294 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc295

Testcase 295 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc296

Testcase 296 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc297

Testcase 297 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc298

Testcase 298 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc299

Testcase 299 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc300

Testcase 300 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc301

Testcase 301 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc302

Testcase 302 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc303

Testcase 303 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc304

Testcase 304 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc305

Testcase 305 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc306

Testcase 306 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc307

Testcase 307 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc308

Testcase 308 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc309

Testcase 309 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc310

Testcase 310 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc311

Testcase 311 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc312

Testcase 312 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc313

Testcase 313 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc314

Testcase 314 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc315

Testcase 315 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc316

Testcase 316 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc317

Testcase 317 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc318

Testcase 318 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc319

Testcase 319 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc320

Testcase 320 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc321

Testcase 321 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc322

Testcase 322 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc323

Testcase 323 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc324

Testcase 324 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc325

Testcase 325 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc326

Testcase 326 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc327

Testcase 327 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc328

Testcase 328 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc329

Testcase 329 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc330

Testcase 330 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc331

Testcase 331 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc332

Testcase 332 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc333

Testcase 333 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc334

Testcase 334 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc335

Testcase 335 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc336

Testcase 336 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc337

Testcase 337 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc338

Testcase 338 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc339

Testcase 339 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc340

Testcase 340 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc341

Testcase 341 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc342

Testcase 342 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc343

Testcase 343 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc344

Testcase 344 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc345

Testcase 345 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc346

Testcase 346 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc347

Testcase 347 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc348

Testcase 348 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc349

Testcase 349 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc350

Testcase 350 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc351

Testcase 351 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc352

Testcase 352 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc353

Testcase 353 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc354

Testcase 354 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc355

Testcase 355 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc356

Testcase 356 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc357

Testcase 357 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc358

Testcase 358 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc359

Testcase 359 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc360

Testcase 360 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc361

Testcase 361 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc362

Testcase 362 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc363

Testcase 363 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc364

Testcase 364 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc365

Testcase 365 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc366

Testcase 366 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc367

Testcase 367 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc368

Testcase 368 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc369

Testcase 369 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc370

Testcase 370 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc371

Testcase 371 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc372

Testcase 372 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc373

Testcase 373 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc374

Testcase 374 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc375

Testcase 375 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc376

Testcase 376 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc377

Testcase 377 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc378

Testcase 378 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc379

Testcase 379 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc380

Testcase 380 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc381

Testcase 381 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc382

Testcase 382 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc383

Testcase 383 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc384

Testcase 384 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc385

Testcase 385 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc386

Testcase 386 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc387

Testcase 387 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc388

Testcase 388 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc389

Testcase 389 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc390

Testcase 390 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc391

Testcase 391 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc392

Testcase 392 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc393

Testcase 393 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc394

Testcase 394 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc395

Testcase 395 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc396

Testcase 396 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc397

Testcase 397 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc398

Testcase 398 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc399

Testcase 399 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc400

Testcase 400 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc401

Testcase 401 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc402

Testcase 402 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc403

Testcase 403 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc404

Testcase 404 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc405

Testcase 405 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc406

Testcase 406 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc407

Testcase 407 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc408

Testcase 408 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc409

Testcase 409 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc410

Testcase 410 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc411

Testcase 411 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc412

Testcase 412 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc413

Testcase 413 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc414

Testcase 414 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc415

Testcase 415 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc416

Testcase 416 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc417

Testcase 417 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc418

Testcase 418 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc419

Testcase 419 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc420

Testcase 420 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc421

Testcase 421 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc422

Testcase 422 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc423

Testcase 423 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc424

Testcase 424 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc425

Testcase 425 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc426

Testcase 426 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc427

Testcase 427 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc428

Testcase 428 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc429

Testcase 429 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc430

Testcase 430 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc431

Testcase 431 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc432

Testcase 432 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc433

Testcase 433 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc434

Testcase 434 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc435

Testcase 435 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc436

Testcase 436 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc437

Testcase 437 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc438

Testcase 438 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc439

Testcase 439 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc440

Testcase 440 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc441

Testcase 441 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc442

Testcase 442 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc443

Testcase 443 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc444

Testcase 444 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc445

Testcase 445 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc446

Testcase 446 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc447

Testcase 447 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc448

Testcase 448 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc449

Testcase 449 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc450

Testcase 450 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc451

Testcase 451 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc452

Testcase 452 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc453

Testcase 453 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc454

Testcase 454 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc455

Testcase 455 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc456

Testcase 456 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc457

Testcase 457 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc458

Testcase 458 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc459

Testcase 459 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc460

Testcase 460 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc461

Testcase 461 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc462

Testcase 462 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc463

Testcase 463 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc464

Testcase 464 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc465

Testcase 465 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc466

Testcase 466 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc467

Testcase 467 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc468

Testcase 468 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc469

Testcase 469 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc470

Testcase 470 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc471

Testcase 471 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc472

Testcase 472 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc473

Testcase 473 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc474

Testcase 474 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc475

Testcase 475 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc476

Testcase 476 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc477

Testcase 477 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc478

Testcase 478 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc479

Testcase 479 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc480

Testcase 480 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc481

Testcase 481 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc482

Testcase 482 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc483

Testcase 483 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc484

Testcase 484 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc485

Testcase 485 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc486

Testcase 486 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc487

Testcase 487 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc488

Testcase 488 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc489

Testcase 489 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc490

Testcase 490 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc491

Testcase 491 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc492

Testcase 492 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc493

Testcase 493 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc494

Testcase 494 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc495

Testcase 495 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc496

Testcase 496 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc497

Testcase 497 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc498

Testcase 498 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc499

Testcase 499 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc500

Testcase 500 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc501

Testcase 501 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc502

Testcase 502 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc503

Testcase 503 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc504

Testcase 504 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc505

Testcase 505 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc506

Testcase 506 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc507

Testcase 507 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc508

Testcase 508 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc509

Testcase 509 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc510

Testcase 510 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc511

Testcase 511 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc512

Testcase 512 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc513

Testcase 513 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc514

Testcase 514 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc515

Testcase 515 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc516

Testcase 516 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc517

Testcase 517 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc518

Testcase 518 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc519

Testcase 519 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc520

Testcase 520 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc521

Testcase 521 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc522

Testcase 522 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc523

Testcase 523 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc524

Testcase 524 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc525

Testcase 525 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc526

Testcase 526 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc527

Testcase 527 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc528

Testcase 528 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc529

Testcase 529 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc530

Testcase 530 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc531

Testcase 531 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc532

Testcase 532 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc533

Testcase 533 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc534

Testcase 534 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc535

Testcase 535 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc536

Testcase 536 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc537

Testcase 537 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc538

Testcase 538 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc539

Testcase 539 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc540

Testcase 540 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc541

Testcase 541 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc542

Testcase 542 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc543

Testcase 543 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc544

Testcase 544 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc545

Testcase 545 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc546

Testcase 546 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc547

Testcase 547 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc548

Testcase 548 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc549

Testcase 549 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc550

Testcase 550 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc551

Testcase 551 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc552

Testcase 552 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc553

Testcase 553 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc554

Testcase 554 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc555

Testcase 555 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc556

Testcase 556 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc557

Testcase 557 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc558

Testcase 558 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc559

Testcase 559 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc560

Testcase 560 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc561

Testcase 561 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc562

Testcase 562 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc563

Testcase 563 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc564

Testcase 564 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc565

Testcase 565 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc566

Testcase 566 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc567

Testcase 567 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc568

Testcase 568 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc569

Testcase 569 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc570

Testcase 570 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc571

Testcase 571 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc572

Testcase 572 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc573

Testcase 573 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc574

Testcase 574 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc575

Testcase 575 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc576

Testcase 576 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc577

Testcase 577 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc578

Testcase 578 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc579

Testcase 579 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc580

Testcase 580 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc581

Testcase 581 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc582

Testcase 582 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc583

Testcase 583 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc584

Testcase 584 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc585

Testcase 585 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc586

Testcase 586 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc587

Testcase 587 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc588

Testcase 588 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc589

Testcase 589 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc590

Testcase 590 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc591

Testcase 591 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc592

Testcase 592 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc593

Testcase 593 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc594

Testcase 594 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc595

Testcase 595 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc596

Testcase 596 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc597

Testcase 597 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc598

Testcase 598 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc599

Testcase 599 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc600

Testcase 600 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc601

Testcase 601 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc602

Testcase 602 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc603

Testcase 603 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc604

Testcase 604 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc605

Testcase 605 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc606

Testcase 606 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc607

Testcase 607 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc608

Testcase 608 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc609

Testcase 609 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc610

Testcase 610 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc611

Testcase 611 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc612

Testcase 612 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc613

Testcase 613 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc614

Testcase 614 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc615

Testcase 615 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc616

Testcase 616 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc617

Testcase 617 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc618

Testcase 618 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc619

Testcase 619 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc620

Testcase 620 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc621

Testcase 621 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc622

Testcase 622 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc623

Testcase 623 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc624

Testcase 624 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc625

Testcase 625 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc626

Testcase 626 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc627

Testcase 627 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc628

Testcase 628 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc629

Testcase 629 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc630

Testcase 630 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc631

Testcase 631 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc632

Testcase 632 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc633

Testcase 633 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc634

Testcase 634 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc635

Testcase 635 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc636

Testcase 636 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc637

Testcase 637 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc638

Testcase 638 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc639

Testcase 639 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc640

Testcase 640 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc641

Testcase 641 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc642

Testcase 642 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc643

Testcase 643 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc644

Testcase 644 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc645

Testcase 645 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc646

Testcase 646 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc647

Testcase 647 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc648

Testcase 648 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc649

Testcase 649 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc650

Testcase 650 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc651

Testcase 651 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc652

Testcase 652 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc653

Testcase 653 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc654

Testcase 654 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc655

Testcase 655 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc656

Testcase 656 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc657

Testcase 657 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc658

Testcase 658 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc659

Testcase 659 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc660

Testcase 660 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc661

Testcase 661 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc662

Testcase 662 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc663

Testcase 663 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc664

Testcase 664 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc665

Testcase 665 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc666

Testcase 666 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc667

Testcase 667 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc668

Testcase 668 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc669

Testcase 669 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc670

Testcase 670 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc671

Testcase 671 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc672

Testcase 672 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc673

Testcase 673 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc674

Testcase 674 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc675

Testcase 675 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc676

Testcase 676 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc677

Testcase 677 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc678

Testcase 678 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc679

Testcase 679 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc680

Testcase 680 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc681

Testcase 681 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc682

Testcase 682 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc683

Testcase 683 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc684

Testcase 684 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc685

Testcase 685 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc686

Testcase 686 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc687

Testcase 687 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc688

Testcase 688 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc689

Testcase 689 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc690

Testcase 690 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc691

Testcase 691 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc692

Testcase 692 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc693

Testcase 693 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc694

Testcase 694 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc695

Testcase 695 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc696

Testcase 696 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc697

Testcase 697 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc698

Testcase 698 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc699

Testcase 699 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc700

Testcase 700 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc701

Testcase 701 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc702

Testcase 702 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc703

Testcase 703 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc704

Testcase 704 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc705

Testcase 705 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc706

Testcase 706 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc707

Testcase 707 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc708

Testcase 708 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc709

Testcase 709 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc710

Testcase 710 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc711

Testcase 711 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc712

Testcase 712 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc713

Testcase 713 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc714

Testcase 714 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc715

Testcase 715 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc716

Testcase 716 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc717

Testcase 717 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc718

Testcase 718 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc719

Testcase 719 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc720

Testcase 720 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc721

Testcase 721 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc722

Testcase 722 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc723

Testcase 723 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc724

Testcase 724 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc725

Testcase 725 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc726

Testcase 726 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc727

Testcase 727 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc728

Testcase 728 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc729

Testcase 729 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc730

Testcase 730 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc731

Testcase 731 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc732

Testcase 732 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc733

Testcase 733 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc734

Testcase 734 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc735

Testcase 735 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc736

Testcase 736 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	❌ (unexpected success)	N/A
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc737

Testcase 737 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc738

Testcase 738 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc739

Testcase 739 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc740

Testcase 740 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc741

Testcase 741 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc742

Testcase 742 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc743

Testcase 743 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc744

Testcase 744 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc745

Testcase 745 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc746

Testcase 746 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc747

Testcase 747 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc748

Testcase 748 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc749

Testcase 749 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc750

Testcase 750 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc751

Testcase 751 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc752

Testcase 752 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc753

Testcase 753 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc754

Testcase 754 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc755

Testcase 755 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc756

Testcase 756 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc757

Testcase 757 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc758

Testcase 758 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc759

Testcase 759 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc760

Testcase 760 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc761

Testcase 761 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc762

Testcase 762 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc763

Testcase 763 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc764

Testcase 764 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc765

Testcase 765 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc766

Testcase 766 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc767

Testcase 767 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc768

Testcase 768 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc769

Testcase 769 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc770

Testcase 770 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc771

Testcase 771 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc772

Testcase 772 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc773

Testcase 773 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc774

Testcase 774 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc775

Testcase 775 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc776

Testcase 776 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc777

Testcase 777 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc778

Testcase 778 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc779

Testcase 779 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc780

Testcase 780 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc781

Testcase 781 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc782

Testcase 782 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc783

Testcase 783 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc784

Testcase 784 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc785

Testcase 785 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc786

Testcase 786 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc787

Testcase 787 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc788

Testcase 788 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc789

Testcase 789 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc790

Testcase 790 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc791

Testcase 791 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc792

Testcase 792 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc793

Testcase 793 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc794

Testcase 794 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc795

Testcase 795 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc796

Testcase 796 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc797

Testcase 797 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc798

Testcase 798 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc799

Testcase 799 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc800

Testcase 800 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc801

Testcase 801 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc802

Testcase 802 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc803

Testcase 803 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc804

Testcase 804 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc805

Testcase 805 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc806

Testcase 806 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc807

Testcase 807 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc808

Testcase 808 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc809

Testcase 809 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc810

Testcase 810 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc811

Testcase 811 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc812

Testcase 812 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc813

Testcase 813 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc814

Testcase 814 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc815

Testcase 815 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc816

Testcase 816 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc817

Testcase 817 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc818

Testcase 818 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc819

Testcase 819 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc820

Testcase 820 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc821

Testcase 821 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc822

Testcase 822 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc823

Testcase 823 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc824

Testcase 824 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc825

Testcase 825 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc826

Testcase 826 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc827

Testcase 827 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc828

Testcase 828 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc829

Testcase 829 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc830

Testcase 830 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc831

Testcase 831 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc832

Testcase 832 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc833

Testcase 833 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc834

Testcase 834 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc835

Testcase 835 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc836

Testcase 836 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc837

Testcase 837 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc838

Testcase 838 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc839

Testcase 839 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc840

Testcase 840 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc841

Testcase 841 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc842

Testcase 842 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc843

Testcase 843 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc844

Testcase 844 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc845

Testcase 845 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc846

Testcase 846 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc847

Testcase 847 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc848

Testcase 848 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc849

Testcase 849 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc850

Testcase 850 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc851

Testcase 851 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc852

Testcase 852 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc853

Testcase 853 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc854

Testcase 854 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc855

Testcase 855 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc856

Testcase 856 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc857

Testcase 857 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc858

Testcase 858 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc859

Testcase 859 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc860

Testcase 860 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc861

Testcase 861 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc862

Testcase 862 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc863

Testcase 863 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc864

Testcase 864 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc865

Testcase 865 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc866

Testcase 866 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc867

Testcase 867 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc868

Testcase 868 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc869

Testcase 869 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc870

Testcase 870 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc871

Testcase 871 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc872

Testcase 872 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc873

Testcase 873 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc874

Testcase 874 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc875

Testcase 875 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc876

Testcase 876 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc877

Testcase 877 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc878

Testcase 878 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc879

Testcase 879 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc880

Testcase 880 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc881

Testcase 881 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc882

Testcase 882 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc883

Testcase 883 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc884

Testcase 884 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc885

Testcase 885 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc886

Testcase 886 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc887

Testcase 887 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc888

Testcase 888 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc889

Testcase 889 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc890

Testcase 890 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc891

Testcase 891 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc892

Testcase 892 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc893

Testcase 893 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc894

Testcase 894 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc895

Testcase 895 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc896

Testcase 896 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc897

Testcase 897 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc898

Testcase 898 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc899

Testcase 899 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc900

Testcase 900 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc901

Testcase 901 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc902

Testcase 902 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc903

Testcase 903 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc904

Testcase 904 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc905

Testcase 905 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc906

Testcase 906 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc907

Testcase 907 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc908

Testcase 908 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc909

Testcase 909 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc910

Testcase 910 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc911

Testcase 911 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc912

Testcase 912 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc913

Testcase 913 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc914

Testcase 914 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc915

Testcase 915 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc916

Testcase 916 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc917

Testcase 917 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc918

Testcase 918 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc919

Testcase 919 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc920

Testcase 920 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc921

Testcase 921 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc922

Testcase 922 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc923

Testcase 923 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc924

Testcase 924 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc925

Testcase 925 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc926

Testcase 926 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc927

Testcase 927 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc928

Testcase 928 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc929

Testcase 929 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc930

Testcase 930 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc931

Testcase 931 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc932

Testcase 932 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc933

Testcase 933 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc934

Testcase 934 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc935

Testcase 935 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc936

Testcase 936 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc937

Testcase 937 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc938

Testcase 938 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc939

Testcase 939 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc940

Testcase 940 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc941

Testcase 941 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc942

Testcase 942 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc943

Testcase 943 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc944

Testcase 944 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc945

Testcase 945 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc946

Testcase 946 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc947

Testcase 947 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc948

Testcase 948 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc949

Testcase 949 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc950

Testcase 950 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc951

Testcase 951 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc952

Testcase 952 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc953

Testcase 953 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc954

Testcase 954 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc955

Testcase 955 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc956

Testcase 956 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc957

Testcase 957 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc958

Testcase 958 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc959

Testcase 959 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc960

Testcase 960 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc961

Testcase 961 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc962

Testcase 962 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc963

Testcase 963 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc964

Testcase 964 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc965

Testcase 965 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc966

Testcase 966 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc967

Testcase 967 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc968

Testcase 968 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc969

Testcase 969 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc970

Testcase 970 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc971

Testcase 971 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc972

Testcase 972 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc973

Testcase 973 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc974

Testcase 974 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc975

Testcase 975 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc976

Testcase 976 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc977

Testcase 977 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc978

Testcase 978 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc979

Testcase 979 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc980

Testcase 980 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc981

Testcase 981 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc982

Testcase 982 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc983

Testcase 983 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc984

Testcase 984 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc985

Testcase 985 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc986

Testcase 986 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc987

Testcase 987 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc988

Testcase 988 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc989

Testcase 989 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc990

Testcase 990 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc991

Testcase 991 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc992

Testcase 992 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc993

Testcase 993 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc994

Testcase 994 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc995

Testcase 995 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc996

Testcase 996 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc997

Testcase 997 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc998

Testcase 998 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc999

Testcase 999 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1000

Testcase 1000 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1001

Testcase 1001 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1002

Testcase 1002 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1003

Testcase 1003 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1004

Testcase 1004 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1005

Testcase 1005 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1006

Testcase 1006 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1007

Testcase 1007 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1008

Testcase 1008 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1009

Testcase 1009 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1010

Testcase 1010 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1011

Testcase 1011 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1012

Testcase 1012 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1013

Testcase 1013 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1014

Testcase 1014 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1015

Testcase 1015 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1016

Testcase 1016 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1017

Testcase 1017 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1018

Testcase 1018 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1019

Testcase 1019 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1020

Testcase 1020 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1021

Testcase 1021 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1022

Testcase 1022 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1023

Testcase 1023 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1024

Testcase 1024 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1025

Testcase 1025 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1026

Testcase 1026 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1027

Testcase 1027 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1028

Testcase 1028 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1029

Testcase 1029 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1030

Testcase 1030 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1031

Testcase 1031 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1032

Testcase 1032 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1033

Testcase 1033 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1034

Testcase 1034 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1035

Testcase 1035 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1036

Testcase 1036 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1037

Testcase 1037 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1038

Testcase 1038 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1039

Testcase 1039 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1040

Testcase 1040 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1041

Testcase 1041 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1042

Testcase 1042 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1043

Testcase 1043 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1044

Testcase 1044 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1045

Testcase 1045 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1046

Testcase 1046 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1047

Testcase 1047 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1048

Testcase 1048 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1049

Testcase 1049 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1050

Testcase 1050 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1051

Testcase 1051 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1052

Testcase 1052 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1053

Testcase 1053 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1054

Testcase 1054 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1055

Testcase 1055 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1056

Testcase 1056 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1057

Testcase 1057 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1058

Testcase 1058 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1059

Testcase 1059 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1060

Testcase 1060 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1061

Testcase 1061 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1062

Testcase 1062 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1063

Testcase 1063 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1064

Testcase 1064 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1065

Testcase 1065 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1066

Testcase 1066 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1067

Testcase 1067 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1068

Testcase 1068 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1069

Testcase 1069 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1070

Testcase 1070 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1071

Testcase 1071 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1072

Testcase 1072 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1073

Testcase 1073 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1074

Testcase 1074 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1075

Testcase 1075 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1076

Testcase 1076 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1077

Testcase 1077 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1078

Testcase 1078 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1079

Testcase 1079 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1080

Testcase 1080 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1081

Testcase 1081 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1082

Testcase 1082 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1083

Testcase 1083 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1084

Testcase 1084 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1085

Testcase 1085 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1086

Testcase 1086 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1087

Testcase 1087 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1088

Testcase 1088 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1089

Testcase 1089 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1090

Testcase 1090 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1091

Testcase 1091 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1092

Testcase 1092 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1093

Testcase 1093 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1094

Testcase 1094 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1095

Testcase 1095 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1096

Testcase 1096 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1097

Testcase 1097 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1098

Testcase 1098 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1099

Testcase 1099 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1100

Testcase 1100 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1101

Testcase 1101 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1102

Testcase 1102 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1103

Testcase 1103 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1104

Testcase 1104 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1105

Testcase 1105 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1106

Testcase 1106 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1107

Testcase 1107 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1108

Testcase 1108 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1109

Testcase 1109 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1110

Testcase 1110 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1111

Testcase 1111 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1112

Testcase 1112 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1113

Testcase 1113 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1114

Testcase 1114 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1115

Testcase 1115 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1116

Testcase 1116 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1117

Testcase 1117 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1118

Testcase 1118 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1119

Testcase 1119 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1120

Testcase 1120 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1121

Testcase 1121 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1122

Testcase 1122 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1123

Testcase 1123 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1124

Testcase 1124 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1125

Testcase 1125 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1126

Testcase 1126 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1127

Testcase 1127 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1128

Testcase 1128 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1129

Testcase 1129 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1130

Testcase 1130 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1131

Testcase 1131 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1132

Testcase 1132 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1133

Testcase 1133 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1134

Testcase 1134 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1135

Testcase 1135 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1136

Testcase 1136 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1137

Testcase 1137 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1138

Testcase 1138 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1139

Testcase 1139 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1140

Testcase 1140 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1141

Testcase 1141 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1142

Testcase 1142 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1143

Testcase 1143 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1144

Testcase 1144 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1145

Testcase 1145 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1146

Testcase 1146 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1147

Testcase 1147 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1148

Testcase 1148 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1149

Testcase 1149 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1150

Testcase 1150 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1151

Testcase 1151 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1152

Testcase 1152 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1153

Testcase 1153 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1154

Testcase 1154 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1155

Testcase 1155 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1156

Testcase 1156 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1157

Testcase 1157 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1158

Testcase 1158 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1159

Testcase 1159 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1160

Testcase 1160 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1161

Testcase 1161 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1162

Testcase 1162 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1163

Testcase 1163 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1164

Testcase 1164 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1165

Testcase 1165 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1166

Testcase 1166 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1167

Testcase 1167 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1168

Testcase 1168 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1169

Testcase 1169 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1170

Testcase 1170 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1171

Testcase 1171 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1172

Testcase 1172 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1173

Testcase 1173 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1174

Testcase 1174 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1175

Testcase 1175 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1176

Testcase 1176 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1177

Testcase 1177 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1178

Testcase 1178 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1179

Testcase 1179 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1180

Testcase 1180 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1181

Testcase 1181 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1182

Testcase 1182 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1183

Testcase 1183 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1184

Testcase 1184 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1185

Testcase 1185 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1186

Testcase 1186 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1187

Testcase 1187 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1188

Testcase 1188 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1189

Testcase 1189 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1190

Testcase 1190 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1191

Testcase 1191 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1192

Testcase 1192 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1193

Testcase 1193 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1194

Testcase 1194 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1195

Testcase 1195 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1196

Testcase 1196 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1197

Testcase 1197 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1198

Testcase 1198 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1199

Testcase 1199 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1200

Testcase 1200 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1201

Testcase 1201 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1202

Testcase 1202 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1203

Testcase 1203 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1204

Testcase 1204 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1205

Testcase 1205 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1206

Testcase 1206 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1207

Testcase 1207 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1208

Testcase 1208 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1209

Testcase 1209 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1210

Testcase 1210 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1211

Testcase 1211 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1212

Testcase 1212 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1213

Testcase 1213 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1214

Testcase 1214 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1215

Testcase 1215 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1216

Testcase 1216 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1217

Testcase 1217 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1218

Testcase 1218 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1219

Testcase 1219 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1220

Testcase 1220 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1221

Testcase 1221 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1222

Testcase 1222 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1223

Testcase 1223 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1224

Testcase 1224 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1225

Testcase 1225 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1226

Testcase 1226 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1227

Testcase 1227 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1228

Testcase 1228 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1229

Testcase 1229 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1230

Testcase 1230 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1231

Testcase 1231 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1232

Testcase 1232 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1233

Testcase 1233 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1234

Testcase 1234 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1235

Testcase 1235 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1236

Testcase 1236 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1237

Testcase 1237 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1238

Testcase 1238 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1239

Testcase 1239 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1240

Testcase 1240 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1241

Testcase 1241 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1242

Testcase 1242 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1243

Testcase 1243 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1244

Testcase 1244 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1245

Testcase 1245 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1246

Testcase 1246 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1247

Testcase 1247 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1248

Testcase 1248 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1249

Testcase 1249 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1250

Testcase 1250 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1251

Testcase 1251 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1252

Testcase 1252 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1253

Testcase 1253 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1254

Testcase 1254 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1255

Testcase 1255 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1256

Testcase 1256 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1257

Testcase 1257 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1258

Testcase 1258 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1259

Testcase 1259 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1260

Testcase 1260 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1261

Testcase 1261 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1262

Testcase 1262 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1263

Testcase 1263 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1264

Testcase 1264 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1265

Testcase 1265 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1266

Testcase 1266 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1267

Testcase 1267 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1268

Testcase 1268 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1269

Testcase 1269 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1270

Testcase 1270 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1271

Testcase 1271 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1272

Testcase 1272 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1273

Testcase 1273 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1274

Testcase 1274 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1275

Testcase 1275 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1276

Testcase 1276 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1277

Testcase 1277 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1278

Testcase 1278 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1279

Testcase 1279 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1280

Testcase 1280 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1281

Testcase 1281 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1282

Testcase 1282 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1283

Testcase 1283 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1284

Testcase 1284 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1285

Testcase 1285 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1286

Testcase 1286 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1287

Testcase 1287 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1288

Testcase 1288 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1289

Testcase 1289 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1290

Testcase 1290 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1291

Testcase 1291 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1292

Testcase 1292 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1293

Testcase 1293 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1294

Testcase 1294 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1295

Testcase 1295 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1296

Testcase 1296 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1297

Testcase 1297 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1298

Testcase 1298 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1299

Testcase 1299 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1300

Testcase 1300 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1301

Testcase 1301 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1302

Testcase 1302 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1303

Testcase 1303 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1304

Testcase 1304 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1305

Testcase 1305 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1306

Testcase 1306 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1307

Testcase 1307 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1308

Testcase 1308 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1309

Testcase 1309 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1310

Testcase 1310 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1311

Testcase 1311 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1312

Testcase 1312 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1313

Testcase 1313 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1314

Testcase 1314 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1315

Testcase 1315 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1316

Testcase 1316 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1317

Testcase 1317 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1318

Testcase 1318 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1319

Testcase 1319 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1320

Testcase 1320 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1321

Testcase 1321 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1322

Testcase 1322 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1323

Testcase 1323 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1324

Testcase 1324 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1325

Testcase 1325 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1326

Testcase 1326 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1327

Testcase 1327 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1328

Testcase 1328 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1329

Testcase 1329 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1330

Testcase 1330 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1331

Testcase 1331 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1332

Testcase 1332 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1333

Testcase 1333 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1334

Testcase 1334 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1335

Testcase 1335 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1336

Testcase 1336 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1337

Testcase 1337 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1338

Testcase 1338 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1339

Testcase 1339 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1340

Testcase 1340 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1341

Testcase 1341 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1342

Testcase 1342 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1343

Testcase 1343 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1344

Testcase 1344 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1345

Testcase 1345 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1346

Testcase 1346 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1347

Testcase 1347 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1348

Testcase 1348 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1349

Testcase 1349 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1350

Testcase 1350 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1351

Testcase 1351 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1352

Testcase 1352 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1353

Testcase 1353 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1354

Testcase 1354 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1355

Testcase 1355 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1356

Testcase 1356 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1357

Testcase 1357 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1358

Testcase 1358 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1359

Testcase 1359 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1360

Testcase 1360 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1361

Testcase 1361 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1362

Testcase 1362 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1363

Testcase 1363 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1364

Testcase 1364 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1365

Testcase 1365 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1366

Testcase 1366 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1367

Testcase 1367 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1368

Testcase 1368 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1369

Testcase 1369 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1370

Testcase 1370 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1371

Testcase 1371 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1372

Testcase 1372 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1373

Testcase 1373 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1374

Testcase 1374 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1375

Testcase 1375 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1376

Testcase 1376 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1377

Testcase 1377 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1378

Testcase 1378 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1379

Testcase 1379 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1380

Testcase 1380 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1381

Testcase 1381 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1382

Testcase 1382 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1383

Testcase 1383 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1384

Testcase 1384 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1385

Testcase 1385 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1386

Testcase 1386 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1387

Testcase 1387 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1388

Testcase 1388 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1389

Testcase 1389 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1390

Testcase 1390 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1391

Testcase 1391 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1392

Testcase 1392 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1393

Testcase 1393 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1394

Testcase 1394 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1395

Testcase 1395 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1396

Testcase 1396 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1397

Testcase 1397 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1398

Testcase 1398 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1399

Testcase 1399 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1400

Testcase 1400 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1401

Testcase 1401 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1402

Testcase 1402 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1403

Testcase 1403 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1404

Testcase 1404 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1405

Testcase 1405 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1406

Testcase 1406 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1407

Testcase 1407 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1408

Testcase 1408 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1409

Testcase 1409 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1410

Testcase 1410 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1411

Testcase 1411 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1412

Testcase 1412 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1413

Testcase 1413 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1414

Testcase 1414 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1415

Testcase 1415 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1416

Testcase 1416 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1417

Testcase 1417 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1418

Testcase 1418 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1419

Testcase 1419 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1420

Testcase 1420 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1421

Testcase 1421 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1422

Testcase 1422 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1423

Testcase 1423 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1424

Testcase 1424 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1425

Testcase 1425 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1426

Testcase 1426 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1427

Testcase 1427 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1428

Testcase 1428 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1429

Testcase 1429 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1430

Testcase 1430 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1431

Testcase 1431 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1432

Testcase 1432 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1433

Testcase 1433 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1434

Testcase 1434 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1435

Testcase 1435 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1436

Testcase 1436 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1437

Testcase 1437 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1438

Testcase 1438 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1439

Testcase 1439 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1440

Testcase 1440 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1441

Testcase 1441 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1442

Testcase 1442 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1443

Testcase 1443 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1444

Testcase 1444 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1445

Testcase 1445 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1446

Testcase 1446 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1447

Testcase 1447 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1448

Testcase 1448 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1449

Testcase 1449 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1450

Testcase 1450 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1451

Testcase 1451 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1452

Testcase 1452 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1453

Testcase 1453 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1454

Testcase 1454 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1455

Testcase 1455 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1456

Testcase 1456 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1457

Testcase 1457 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1458

Testcase 1458 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1459

Testcase 1459 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1460

Testcase 1460 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1461

Testcase 1461 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1462

Testcase 1462 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1463

Testcase 1463 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1464

Testcase 1464 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1465

Testcase 1465 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1466

Testcase 1466 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1467

Testcase 1467 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1468

Testcase 1468 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1469

Testcase 1469 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1470

Testcase 1470 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1471

Testcase 1471 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1472

Testcase 1472 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1473

Testcase 1473 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1474

Testcase 1474 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1475

Testcase 1475 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1476

Testcase 1476 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1477

Testcase 1477 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1478

Testcase 1478 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1479

Testcase 1479 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1480

Testcase 1480 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1481

Testcase 1481 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1482

Testcase 1482 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1483

Testcase 1483 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1484

Testcase 1484 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1485

Testcase 1485 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1486

Testcase 1486 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1487

Testcase 1487 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1488

Testcase 1488 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1489

Testcase 1489 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1490

Testcase 1490 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1491

Testcase 1491 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1492

Testcase 1492 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1493

Testcase 1493 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1494

Testcase 1494 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1495

Testcase 1495 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1496

Testcase 1496 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1497

Testcase 1497 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1498

Testcase 1498 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1499

Testcase 1499 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1500

Testcase 1500 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1501

Testcase 1501 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1502

Testcase 1502 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1503

Testcase 1503 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1504

Testcase 1504 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1505

Testcase 1505 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1506

Testcase 1506 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1507

Testcase 1507 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1508

Testcase 1508 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1509

Testcase 1509 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1510

Testcase 1510 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1511

Testcase 1511 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1512

Testcase 1512 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1513

Testcase 1513 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1514

Testcase 1514 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1515

Testcase 1515 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1516

Testcase 1516 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1517

Testcase 1517 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1518

Testcase 1518 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1519

Testcase 1519 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1520

Testcase 1520 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1521

Testcase 1521 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1522

Testcase 1522 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1523

Testcase 1523 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1524

Testcase 1524 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1525

Testcase 1525 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1526

Testcase 1526 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1527

Testcase 1527 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1528

Testcase 1528 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1529

Testcase 1529 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1530

Testcase 1530 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1531

Testcase 1531 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1532

Testcase 1532 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1533

Testcase 1533 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1534

Testcase 1534 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1535

Testcase 1535 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1536

Testcase 1536 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1537

Testcase 1537 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1538

Testcase 1538 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1539

Testcase 1539 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1540

Testcase 1540 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1541

Testcase 1541 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1542

Testcase 1542 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1543

Testcase 1543 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1544

Testcase 1544 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1545

Testcase 1545 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1546

Testcase 1546 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1547

Testcase 1547 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1548

Testcase 1548 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1549

Testcase 1549 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1550

Testcase 1550 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1551

Testcase 1551 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1552

Testcase 1552 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1553

Testcase 1553 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1554

Testcase 1554 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1555

Testcase 1555 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1556

Testcase 1556 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1557

Testcase 1557 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1558

Testcase 1558 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1559

Testcase 1559 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1560

Testcase 1560 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1561

Testcase 1561 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1562

Testcase 1562 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1563

Testcase 1563 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1564

Testcase 1564 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1565

Testcase 1565 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1566

Testcase 1566 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1567

Testcase 1567 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1568

Testcase 1568 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1569

Testcase 1569 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1570

Testcase 1570 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1571

Testcase 1571 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1572

Testcase 1572 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1573

Testcase 1573 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1574

Testcase 1574 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1575

Testcase 1575 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1576

Testcase 1576 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1577

Testcase 1577 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1578

Testcase 1578 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1579

Testcase 1579 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1580

Testcase 1580 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1581

Testcase 1581 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1582

Testcase 1582 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1583

Testcase 1583 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1584

Testcase 1584 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1585

Testcase 1585 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1586

Testcase 1586 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1587

Testcase 1587 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1588

Testcase 1588 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1589

Testcase 1589 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1590

Testcase 1590 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1591

Testcase 1591 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1592

Testcase 1592 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1593

Testcase 1593 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1594

Testcase 1594 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1595

Testcase 1595 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1596

Testcase 1596 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1597

Testcase 1597 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1598

Testcase 1598 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1599

Testcase 1599 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1600

Testcase 1600 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1601

Testcase 1601 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1602

Testcase 1602 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1603

Testcase 1603 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1604

Testcase 1604 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1605

Testcase 1605 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1606

Testcase 1606 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1607

Testcase 1607 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1608

Testcase 1608 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1609

Testcase 1609 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1610

Testcase 1610 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1611

Testcase 1611 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1612

Testcase 1612 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1613

Testcase 1613 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1614

Testcase 1614 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1615

Testcase 1615 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1616

Testcase 1616 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1617

Testcase 1617 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1618

Testcase 1618 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1619

Testcase 1619 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1620

Testcase 1620 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1621

Testcase 1621 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1622

Testcase 1622 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1623

Testcase 1623 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1624

Testcase 1624 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1625

Testcase 1625 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1626

Testcase 1626 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1627

Testcase 1627 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1628

Testcase 1628 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1629

Testcase 1629 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1630

Testcase 1630 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1631

Testcase 1631 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1632

Testcase 1632 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1633

Testcase 1633 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1634

Testcase 1634 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1635

Testcase 1635 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1636

Testcase 1636 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1637

Testcase 1637 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1638

Testcase 1638 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1639

Testcase 1639 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1640

Testcase 1640 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1641

Testcase 1641 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1642

Testcase 1642 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1643

Testcase 1643 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1644

Testcase 1644 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1645

Testcase 1645 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1646

Testcase 1646 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1647

Testcase 1647 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1648

Testcase 1648 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1649

Testcase 1649 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1650

Testcase 1650 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1651

Testcase 1651 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1652

Testcase 1652 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1653

Testcase 1653 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1654

Testcase 1654 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1655

Testcase 1655 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1656

Testcase 1656 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1657

Testcase 1657 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1658

Testcase 1658 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1659

Testcase 1659 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1660

Testcase 1660 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1661

Testcase 1661 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1662

Testcase 1662 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1663

Testcase 1663 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1664

Testcase 1664 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1665

Testcase 1665 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1666

Testcase 1666 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1667

Testcase 1667 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1668

Testcase 1668 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1669

Testcase 1669 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1670

Testcase 1670 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1671

Testcase 1671 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1672

Testcase 1672 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1673

Testcase 1673 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1674

Testcase 1674 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1675

Testcase 1675 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1676

Testcase 1676 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1677

Testcase 1677 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1678

Testcase 1678 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1679

Testcase 1679 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1680

Testcase 1680 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1681

Testcase 1681 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1682

Testcase 1682 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1683

Testcase 1683 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1684

Testcase 1684 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1685

Testcase 1685 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1686

Testcase 1686 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1687

Testcase 1687 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1688

Testcase 1688 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1689

Testcase 1689 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1690

Testcase 1690 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1691

Testcase 1691 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1692

Testcase 1692 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1693

Testcase 1693 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1694

Testcase 1694 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1695

Testcase 1695 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1696

Testcase 1696 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1697

Testcase 1697 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1698

Testcase 1698 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1699

Testcase 1699 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1700

Testcase 1700 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1701

Testcase 1701 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1702

Testcase 1702 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1703

Testcase 1703 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1704

Testcase 1704 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1705

Testcase 1705 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1706

Testcase 1706 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1707

Testcase 1707 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1708

Testcase 1708 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1709

Testcase 1709 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1710

Testcase 1710 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1711

Testcase 1711 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1712

Testcase 1712 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1713

Testcase 1713 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1714

Testcase 1714 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1715

Testcase 1715 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1716

Testcase 1716 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1717

Testcase 1717 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1718

Testcase 1718 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1719

Testcase 1719 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1720

Testcase 1720 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1721

Testcase 1721 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1722

Testcase 1722 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1723

Testcase 1723 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1724

Testcase 1724 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1725

Testcase 1725 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1726

Testcase 1726 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1727

Testcase 1727 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1728

Testcase 1728 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1729

Testcase 1729 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1730

Testcase 1730 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1731

Testcase 1731 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1732

Testcase 1732 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1733

Testcase 1733 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1734

Testcase 1734 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1735

Testcase 1735 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1736

Testcase 1736 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1737

Testcase 1737 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1738

Testcase 1738 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1739

Testcase 1739 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1740

Testcase 1740 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1741

Testcase 1741 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1742

Testcase 1742 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1743

Testcase 1743 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1744

Testcase 1744 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1745

Testcase 1745 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1746

Testcase 1746 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1747

Testcase 1747 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1748

Testcase 1748 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1749

Testcase 1749 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1750

Testcase 1750 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1751

Testcase 1751 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1752

Testcase 1752 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1753

Testcase 1753 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1754

Testcase 1754 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1755

Testcase 1755 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1756

Testcase 1756 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1757

Testcase 1757 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1758

Testcase 1758 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1759

Testcase 1759 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1760

Testcase 1760 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1761

Testcase 1761 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1762

Testcase 1762 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1763

Testcase 1763 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1764

Testcase 1764 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1765

Testcase 1765 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1766

Testcase 1766 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1767

Testcase 1767 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1768

Testcase 1768 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1769

Testcase 1769 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1770

Testcase 1770 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1771

Testcase 1771 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1772

Testcase 1772 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1773

Testcase 1773 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1774

Testcase 1774 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1775

Testcase 1775 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1776

Testcase 1776 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1777

Testcase 1777 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1778

Testcase 1778 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1779

Testcase 1779 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1780

Testcase 1780 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1781

Testcase 1781 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1782

Testcase 1782 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1783

Testcase 1783 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1784

Testcase 1784 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1785

Testcase 1785 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1786

Testcase 1786 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1787

Testcase 1787 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1788

Testcase 1788 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1789

Testcase 1789 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1790

Testcase 1790 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1791

Testcase 1791 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1792

Testcase 1792 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1793

Testcase 1793 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1794

Testcase 1794 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1795

Testcase 1795 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1796

Testcase 1796 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1797

Testcase 1797 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1798

Testcase 1798 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1799

Testcase 1799 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1800

Testcase 1800 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1801

Testcase 1801 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1802

Testcase 1802 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1803

Testcase 1803 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1804

Testcase 1804 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1805

Testcase 1805 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1806

Testcase 1806 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1807

Testcase 1807 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1808

Testcase 1808 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1809

Testcase 1809 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1810

Testcase 1810 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1811

Testcase 1811 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1812

Testcase 1812 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1813

Testcase 1813 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1814

Testcase 1814 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1815

Testcase 1815 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1816

Testcase 1816 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1817

Testcase 1817 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1818

Testcase 1818 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1819

Testcase 1819 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1820

Testcase 1820 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1821

Testcase 1821 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1822

Testcase 1822 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1823

Testcase 1823 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1824

Testcase 1824 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1825

Testcase 1825 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1826

Testcase 1826 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1827

Testcase 1827 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1828

Testcase 1828 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1829

Testcase 1829 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1830

Testcase 1830 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1831

Testcase 1831 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1832

Testcase 1832 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1833

Testcase 1833 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1834

Testcase 1834 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1835

Testcase 1835 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1836

Testcase 1836 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1837

Testcase 1837 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1838

Testcase 1838 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1839

Testcase 1839 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1840

Testcase 1840 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1841

Testcase 1841 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1842

Testcase 1842 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1843

Testcase 1843 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1844

Testcase 1844 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1845

Testcase 1845 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1846

Testcase 1846 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1847

Testcase 1847 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1848

Testcase 1848 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1849

Testcase 1849 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1850

Testcase 1850 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1851

Testcase 1851 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1852

Testcase 1852 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1853

Testcase 1853 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1854

Testcase 1854 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1855

Testcase 1855 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1856

Testcase 1856 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1857

Testcase 1857 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1858

Testcase 1858 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1859

Testcase 1859 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1860

Testcase 1860 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1861

Testcase 1861 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1862

Testcase 1862 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1863

Testcase 1863 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1864

Testcase 1864 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1865

Testcase 1865 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1866

Testcase 1866 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1867

Testcase 1867 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1868

Testcase 1868 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1869

Testcase 1869 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1870

Testcase 1870 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1871

Testcase 1871 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1872

Testcase 1872 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1873

Testcase 1873 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1874

Testcase 1874 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1875

Testcase 1875 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1876

Testcase 1876 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1877

Testcase 1877 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1878

Testcase 1878 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1879

Testcase 1879 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1880

Testcase 1880 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1881

Testcase 1881 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1882

Testcase 1882 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1883

Testcase 1883 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1884

Testcase 1884 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1885

Testcase 1885 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1886

Testcase 1886 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1887

Testcase 1887 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1888

Testcase 1888 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1889

Testcase 1889 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1890

Testcase 1890 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1891

Testcase 1891 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1892

Testcase 1892 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1893

Testcase 1893 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1894

Testcase 1894 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1895

Testcase 1895 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1896

Testcase 1896 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1897

Testcase 1897 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1898

Testcase 1898 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1899

Testcase 1899 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1900

Testcase 1900 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1901

Testcase 1901 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1902

Testcase 1902 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1903

Testcase 1903 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1904

Testcase 1904 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1905

Testcase 1905 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1906

Testcase 1906 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1907

Testcase 1907 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1908

Testcase 1908 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1909

Testcase 1909 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1910

Testcase 1910 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1911

Testcase 1911 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1912

Testcase 1912 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1913

Testcase 1913 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1914

Testcase 1914 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1915

Testcase 1915 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1916

Testcase 1916 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1917

Testcase 1917 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1918

Testcase 1918 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1919

Testcase 1919 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1920

Testcase 1920 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1921

Testcase 1921 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1922

Testcase 1922 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1923

Testcase 1923 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1924

Testcase 1924 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1925

Testcase 1925 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1926

Testcase 1926 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1927

Testcase 1927 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1928

Testcase 1928 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1929

Testcase 1929 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1930

Testcase 1930 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1931

Testcase 1931 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1932

Testcase 1932 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1933

Testcase 1933 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1934

Testcase 1934 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1935

Testcase 1935 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1936

Testcase 1936 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1937

Testcase 1937 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1938

Testcase 1938 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1939

Testcase 1939 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1940

Testcase 1940 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1941

Testcase 1941 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1942

Testcase 1942 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1943

Testcase 1943 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1944

Testcase 1944 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1945

Testcase 1945 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1946

Testcase 1946 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1947

Testcase 1947 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1948

Testcase 1948 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1949

Testcase 1949 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1950

Testcase 1950 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1951

Testcase 1951 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1952

Testcase 1952 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1953

Testcase 1953 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1954

Testcase 1954 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1955

Testcase 1955 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1956

Testcase 1956 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1957

Testcase 1957 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1958

Testcase 1958 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1959

Testcase 1959 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1960

Testcase 1960 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1961

Testcase 1961 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1962

Testcase 1962 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1963

Testcase 1963 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1964

Testcase 1964 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1965

Testcase 1965 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1966

Testcase 1966 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1967

Testcase 1967 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1968

Testcase 1968 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1969

Testcase 1969 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1970

Testcase 1970 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1971

Testcase 1971 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1972

Testcase 1972 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1973

Testcase 1973 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1974

Testcase 1974 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1975

Testcase 1975 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1976

Testcase 1976 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1977

Testcase 1977 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1978

Testcase 1978 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1979

Testcase 1979 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1980

Testcase 1980 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1981

Testcase 1981 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1982

Testcase 1982 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1983

Testcase 1983 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1984

Testcase 1984 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1985

Testcase 1985 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1986

Testcase 1986 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1987

Testcase 1987 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1988

Testcase 1988 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1989

Testcase 1989 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1990

Testcase 1990 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1991

Testcase 1991 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1992

Testcase 1992 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1993

Testcase 1993 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1994

Testcase 1994 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1995

Testcase 1995 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1996

Testcase 1996 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1997

Testcase 1997 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1998

Testcase 1998 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc1999

Testcase 1999 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2000

Testcase 2000 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2001

Testcase 2001 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2002

Testcase 2002 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2003

Testcase 2003 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2004

Testcase 2004 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2005

Testcase 2005 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2006

Testcase 2006 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2007

Testcase 2007 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2008

Testcase 2008 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2009

Testcase 2009 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2010

Testcase 2010 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2011

Testcase 2011 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2012

Testcase 2012 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2013

Testcase 2013 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2014

Testcase 2014 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2015

Testcase 2015 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2016

Testcase 2016 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2017

Testcase 2017 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2018

Testcase 2018 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2019

Testcase 2019 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2020

Testcase 2020 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2021

Testcase 2021 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2022

Testcase 2022 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2023

Testcase 2023 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2024

Testcase 2024 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2025

Testcase 2025 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2026

Testcase 2026 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2027

Testcase 2027 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2028

Testcase 2028 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2029

Testcase 2029 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2030

Testcase 2030 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2031

Testcase 2031 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2032

Testcase 2032 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2033

Testcase 2033 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2034

Testcase 2034 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2035

Testcase 2035 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2036

Testcase 2036 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2037

Testcase 2037 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2038

Testcase 2038 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2039

Testcase 2039 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2040

Testcase 2040 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2041

Testcase 2041 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2042

Testcase 2042 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2043

Testcase 2043 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2044

Testcase 2044 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2045

Testcase 2045 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2046

Testcase 2046 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2047

Testcase 2047 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2048

Testcase 2048 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2049

Testcase 2049 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2050

Testcase 2050 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2051

Testcase 2051 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2052

Testcase 2052 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2053

Testcase 2053 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2054

Testcase 2054 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2055

Testcase 2055 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2056

Testcase 2056 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2057

Testcase 2057 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2058

Testcase 2058 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2059

Testcase 2059 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2060

Testcase 2060 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2061

Testcase 2061 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2062

Testcase 2062 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2063

Testcase 2063 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2064

Testcase 2064 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2065

Testcase 2065 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2066

Testcase 2066 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2067

Testcase 2067 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2068

Testcase 2068 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2069

Testcase 2069 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2070

Testcase 2070 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2071

Testcase 2071 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2072

Testcase 2072 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2073

Testcase 2073 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2074

Testcase 2074 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2075

Testcase 2075 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2076

Testcase 2076 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2077

Testcase 2077 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2078

Testcase 2078 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2079

Testcase 2079 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2080

Testcase 2080 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2081

Testcase 2081 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2082

Testcase 2082 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2083

Testcase 2083 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2084

Testcase 2084 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2085

Testcase 2085 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2086

Testcase 2086 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2087

Testcase 2087 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2088

Testcase 2088 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2089

Testcase 2089 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2090

Testcase 2090 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2091

Testcase 2091 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2092

Testcase 2092 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2093

Testcase 2093 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2094

Testcase 2094 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2095

Testcase 2095 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2096

Testcase 2096 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2097

Testcase 2097 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2098

Testcase 2098 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2099

Testcase 2099 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2100

Testcase 2100 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2101

Testcase 2101 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2102

Testcase 2102 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2103

Testcase 2103 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2104

Testcase 2104 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2105

Testcase 2105 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2106

Testcase 2106 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2107

Testcase 2107 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2108

Testcase 2108 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2109

Testcase 2109 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2110

Testcase 2110 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2111

Testcase 2111 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2112

Testcase 2112 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2113

Testcase 2113 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2114

Testcase 2114 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2115

Testcase 2115 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2116

Testcase 2116 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2117

Testcase 2117 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2118

Testcase 2118 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2119

Testcase 2119 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2120

Testcase 2120 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2121

Testcase 2121 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2122

Testcase 2122 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2123

Testcase 2123 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2124

Testcase 2124 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2125

Testcase 2125 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2126

Testcase 2126 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2127

Testcase 2127 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2128

Testcase 2128 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2129

Testcase 2129 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2130

Testcase 2130 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2131

Testcase 2131 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2132

Testcase 2132 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2133

Testcase 2133 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2134

Testcase 2134 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2135

Testcase 2135 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2136

Testcase 2136 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2137

Testcase 2137 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2138

Testcase 2138 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2139

Testcase 2139 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2140

Testcase 2140 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2141

Testcase 2141 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2142

Testcase 2142 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2143

Testcase 2143 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2144

Testcase 2144 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2145

Testcase 2145 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2146

Testcase 2146 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2147

Testcase 2147 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2148

Testcase 2148 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2149

Testcase 2149 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2150

Testcase 2150 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2151

Testcase 2151 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2152

Testcase 2152 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2153

Testcase 2153 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2154

Testcase 2154 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2155

Testcase 2155 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2156

Testcase 2156 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2157

Testcase 2157 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2158

Testcase 2158 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2159

Testcase 2159 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2160

Testcase 2160 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2161

Testcase 2161 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2162

Testcase 2162 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2163

Testcase 2163 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2164

Testcase 2164 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2165

Testcase 2165 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2166

Testcase 2166 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2167

Testcase 2167 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2168

Testcase 2168 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2169

Testcase 2169 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2170

Testcase 2170 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2171

Testcase 2171 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2172

Testcase 2172 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2173

Testcase 2173 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2174

Testcase 2174 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2175

Testcase 2175 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2176

Testcase 2176 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2177

Testcase 2177 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2178

Testcase 2178 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2179

Testcase 2179 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2180

Testcase 2180 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2181

Testcase 2181 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2182

Testcase 2182 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2183

Testcase 2183 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2184

Testcase 2184 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2185

Testcase 2185 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2186

Testcase 2186 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2187

Testcase 2187 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2188

Testcase 2188 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2189

Testcase 2189 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2190

Testcase 2190 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2191

Testcase 2191 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2192

Testcase 2192 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2193

Testcase 2193 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2194

Testcase 2194 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2195

Testcase 2195 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2196

Testcase 2196 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2197

Testcase 2197 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2198

Testcase 2198 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2199

Testcase 2199 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2200

Testcase 2200 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2201

Testcase 2201 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2202

Testcase 2202 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2203

Testcase 2203 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2204

Testcase 2204 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2205

Testcase 2205 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2206

Testcase 2206 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2207

Testcase 2207 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2208

Testcase 2208 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2209

Testcase 2209 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2210

Testcase 2210 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2211

Testcase 2211 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2212

Testcase 2212 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2213

Testcase 2213 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2214

Testcase 2214 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2215

Testcase 2215 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2216

Testcase 2216 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2217

Testcase 2217 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2218

Testcase 2218 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2219

Testcase 2219 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2220

Testcase 2220 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2221

Testcase 2221 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2222

Testcase 2222 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2223

Testcase 2223 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2224

Testcase 2224 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2225

Testcase 2225 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2226

Testcase 2226 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2227

Testcase 2227 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2228

Testcase 2228 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2229

Testcase 2229 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2230

Testcase 2230 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2231

Testcase 2231 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2232

Testcase 2232 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2233

Testcase 2233 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2234

Testcase 2234 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2235

Testcase 2235 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2236

Testcase 2236 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2237

Testcase 2237 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2238

Testcase 2238 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2239

Testcase 2239 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2240

Testcase 2240 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2241

Testcase 2241 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2242

Testcase 2242 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2243

Testcase 2243 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2244

Testcase 2244 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2245

Testcase 2245 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2246

Testcase 2246 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2247

Testcase 2247 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2248

Testcase 2248 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2249

Testcase 2249 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2250

Testcase 2250 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2251

Testcase 2251 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2252

Testcase 2252 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2253

Testcase 2253 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2254

Testcase 2254 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2255

Testcase 2255 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2256

Testcase 2256 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2257

Testcase 2257 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2258

Testcase 2258 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2259

Testcase 2259 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2260

Testcase 2260 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2261

Testcase 2261 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2262

Testcase 2262 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2263

Testcase 2263 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2264

Testcase 2264 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2265

Testcase 2265 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2266

Testcase 2266 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2267

Testcase 2267 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2268

Testcase 2268 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2269

Testcase 2269 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2270

Testcase 2270 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2271

Testcase 2271 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2272

Testcase 2272 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2273

Testcase 2273 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2274

Testcase 2274 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2275

Testcase 2275 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2276

Testcase 2276 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2277

Testcase 2277 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2278

Testcase 2278 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2279

Testcase 2279 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2280

Testcase 2280 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2281

Testcase 2281 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2282

Testcase 2282 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2283

Testcase 2283 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2284

Testcase 2284 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2285

Testcase 2285 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2286

Testcase 2286 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2287

Testcase 2287 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2288

Testcase 2288 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2289

Testcase 2289 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2290

Testcase 2290 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2291

Testcase 2291 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2292

Testcase 2292 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2293

Testcase 2293 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2294

Testcase 2294 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2295

Testcase 2295 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2296

Testcase 2296 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2297

Testcase 2297 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2298

Testcase 2298 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2299

Testcase 2299 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2300

Testcase 2300 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2301

Testcase 2301 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2302

Testcase 2302 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2303

Testcase 2303 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2304

Testcase 2304 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2305

Testcase 2305 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2306

Testcase 2306 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2307

Testcase 2307 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2308

Testcase 2308 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2309

Testcase 2309 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2310

Testcase 2310 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2311

Testcase 2311 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2312

Testcase 2312 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2313

Testcase 2313 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2314

Testcase 2314 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2315

Testcase 2315 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2316

Testcase 2316 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2317

Testcase 2317 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2318

Testcase 2318 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2319

Testcase 2319 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2320

Testcase 2320 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2321

Testcase 2321 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2322

Testcase 2322 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2323

Testcase 2323 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2324

Testcase 2324 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2325

Testcase 2325 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2326

Testcase 2326 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2327

Testcase 2327 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2328

Testcase 2328 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2329

Testcase 2329 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2330

Testcase 2330 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2331

Testcase 2331 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2332

Testcase 2332 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2333

Testcase 2333 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2334

Testcase 2334 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2335

Testcase 2335 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2336

Testcase 2336 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2337

Testcase 2337 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2338

Testcase 2338 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2339

Testcase 2339 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2340

Testcase 2340 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2341

Testcase 2341 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2342

Testcase 2342 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2343

Testcase 2343 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2344

Testcase 2344 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2345

Testcase 2345 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2346

Testcase 2346 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2347

Testcase 2347 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2348

Testcase 2348 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2349

Testcase 2349 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2350

Testcase 2350 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2351

Testcase 2351 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2352

Testcase 2352 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2353

Testcase 2353 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2354

Testcase 2354 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2355

Testcase 2355 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2356

Testcase 2356 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2357

Testcase 2357 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2358

Testcase 2358 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2359

Testcase 2359 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2360

Testcase 2360 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2361

Testcase 2361 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2362

Testcase 2362 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2363

Testcase 2363 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2364

Testcase 2364 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2365

Testcase 2365 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2366

Testcase 2366 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2367

Testcase 2367 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2368

Testcase 2368 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2369

Testcase 2369 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2370

Testcase 2370 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2371

Testcase 2371 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2372

Testcase 2372 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2373

Testcase 2373 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2374

Testcase 2374 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2375

Testcase 2375 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2376

Testcase 2376 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2377

Testcase 2377 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2378

Testcase 2378 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2379

Testcase 2379 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2380

Testcase 2380 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2381

Testcase 2381 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2382

Testcase 2382 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2383

Testcase 2383 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2384

Testcase 2384 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2385

Testcase 2385 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2386

Testcase 2386 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2387

Testcase 2387 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2388

Testcase 2388 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2389

Testcase 2389 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2390

Testcase 2390 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2391

Testcase 2391 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2392

Testcase 2392 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2393

Testcase 2393 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2394

Testcase 2394 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2395

Testcase 2395 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2396

Testcase 2396 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2397

Testcase 2397 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2398

Testcase 2398 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2399

Testcase 2399 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2400

Testcase 2400 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2401

Testcase 2401 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2402

Testcase 2402 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2403

Testcase 2403 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2404

Testcase 2404 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2405

Testcase 2405 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2406

Testcase 2406 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2407

Testcase 2407 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2408

Testcase 2408 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2409

Testcase 2409 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2410

Testcase 2410 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2411

Testcase 2411 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2412

Testcase 2412 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2413

Testcase 2413 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2414

Testcase 2414 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2415

Testcase 2415 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2416

Testcase 2416 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2417

Testcase 2417 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2418

Testcase 2418 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2419

Testcase 2419 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2420

Testcase 2420 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2421

Testcase 2421 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2422

Testcase 2422 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2423

Testcase 2423 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2424

Testcase 2424 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2425

Testcase 2425 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2426

Testcase 2426 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2427

Testcase 2427 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2428

Testcase 2428 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2429

Testcase 2429 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2430

Testcase 2430 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2431

Testcase 2431 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2432

Testcase 2432 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2433

Testcase 2433 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2434

Testcase 2434 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2435

Testcase 2435 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2436

Testcase 2436 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2437

Testcase 2437 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2438

Testcase 2438 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2439

Testcase 2439 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2440

Testcase 2440 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2441

Testcase 2441 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2442

Testcase 2442 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2443

Testcase 2443 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2444

Testcase 2444 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2445

Testcase 2445 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2446

Testcase 2446 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2447

Testcase 2447 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2448

Testcase 2448 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2449

Testcase 2449 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2450

Testcase 2450 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2451

Testcase 2451 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2452

Testcase 2452 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2453

Testcase 2453 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2454

Testcase 2454 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2455

Testcase 2455 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2456

Testcase 2456 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2457

Testcase 2457 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2458

Testcase 2458 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2459

Testcase 2459 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2460

Testcase 2460 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2461

Testcase 2461 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2462

Testcase 2462 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2463

Testcase 2463 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2464

Testcase 2464 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2465

Testcase 2465 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2466

Testcase 2466 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2467

Testcase 2467 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2468

Testcase 2468 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2469

Testcase 2469 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2470

Testcase 2470 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2471

Testcase 2471 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2472

Testcase 2472 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2473

Testcase 2473 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2474

Testcase 2474 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2475

Testcase 2475 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2476

Testcase 2476 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2477

Testcase 2477 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2478

Testcase 2478 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2479

Testcase 2479 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2480

Testcase 2480 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2481

Testcase 2481 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2482

Testcase 2482 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2483

Testcase 2483 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2484

Testcase 2484 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2485

Testcase 2485 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2486

Testcase 2486 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2487

Testcase 2487 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2488

Testcase 2488 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2489

Testcase 2489 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2490

Testcase 2490 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2491

Testcase 2491 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2492

Testcase 2492 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2493

Testcase 2493 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2494

Testcase 2494 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2495

Testcase 2495 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2496

Testcase 2496 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2497

Testcase 2497 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2498

Testcase 2498 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2499

Testcase 2499 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2500

Testcase 2500 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2501

Testcase 2501 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2502

Testcase 2502 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2503

Testcase 2503 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2504

Testcase 2504 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2505

Testcase 2505 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2506

Testcase 2506 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2507

Testcase 2507 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2508

Testcase 2508 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2509

Testcase 2509 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2510

Testcase 2510 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2511

Testcase 2511 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2512

Testcase 2512 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2513

Testcase 2513 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2514

Testcase 2514 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2515

Testcase 2515 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2516

Testcase 2516 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2517

Testcase 2517 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2518

Testcase 2518 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2519

Testcase 2519 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2520

Testcase 2520 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2521

Testcase 2521 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2522

Testcase 2522 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2523

Testcase 2523 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2524

Testcase 2524 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2525

Testcase 2525 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2526

Testcase 2526 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2527

Testcase 2527 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2528

Testcase 2528 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2529

Testcase 2529 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2530

Testcase 2530 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2531

Testcase 2531 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2532

Testcase 2532 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2533

Testcase 2533 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2534

Testcase 2534 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2535

Testcase 2535 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2536

Testcase 2536 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2537

Testcase 2537 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2538

Testcase 2538 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2539

Testcase 2539 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2540

Testcase 2540 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2541

Testcase 2541 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2542

Testcase 2542 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2543

Testcase 2543 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2544

Testcase 2544 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2545

Testcase 2545 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2546

Testcase 2546 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2547

Testcase 2547 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2548

Testcase 2548 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2549

Testcase 2549 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2550

Testcase 2550 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2551

Testcase 2551 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2552

Testcase 2552 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2553

Testcase 2553 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2554

Testcase 2554 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2555

Testcase 2555 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2556

Testcase 2556 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2557

Testcase 2557 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2558

Testcase 2558 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2559

Testcase 2559 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2560

Testcase 2560 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2561

Testcase 2561 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2562

Testcase 2562 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2563

Testcase 2563 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2564

Testcase 2564 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2565

Testcase 2565 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2566

Testcase 2566 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2567

Testcase 2567 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2568

Testcase 2568 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2569

Testcase 2569 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2570

Testcase 2570 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2571

Testcase 2571 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2572

Testcase 2572 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2573

Testcase 2573 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2574

Testcase 2574 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2575

Testcase 2575 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2576

Testcase 2576 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2577

Testcase 2577 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2578

Testcase 2578 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2579

Testcase 2579 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2580

Testcase 2580 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2581

Testcase 2581 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2582

Testcase 2582 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2583

Testcase 2583 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2584

Testcase 2584 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2585

Testcase 2585 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2586

Testcase 2586 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2587

Testcase 2587 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2588

Testcase 2588 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2589

Testcase 2589 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2590

Testcase 2590 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2591

Testcase 2591 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2592

Testcase 2592 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2593

Testcase 2593 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2594

Testcase 2594 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2595

Testcase 2595 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2596

Testcase 2596 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2597

Testcase 2597 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2598

Testcase 2598 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2599

Testcase 2599 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2600

Testcase 2600 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2601

Testcase 2601 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2602

Testcase 2602 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2603

Testcase 2603 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2604

Testcase 2604 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2605

Testcase 2605 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2606

Testcase 2606 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2607

Testcase 2607 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2608

Testcase 2608 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2609

Testcase 2609 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2610

Testcase 2610 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2611

Testcase 2611 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2612

Testcase 2612 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2613

Testcase 2613 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2614

Testcase 2614 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2615

Testcase 2615 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2616

Testcase 2616 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2617

Testcase 2617 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2618

Testcase 2618 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2619

Testcase 2619 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2620

Testcase 2620 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2621

Testcase 2621 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2622

Testcase 2622 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2623

Testcase 2623 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2624

Testcase 2624 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2625

Testcase 2625 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2626

Testcase 2626 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2627

Testcase 2627 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2628

Testcase 2628 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2629

Testcase 2629 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2630

Testcase 2630 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2631

Testcase 2631 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2632

Testcase 2632 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2633

Testcase 2633 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2634

Testcase 2634 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2635

Testcase 2635 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2636

Testcase 2636 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2637

Testcase 2637 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2638

Testcase 2638 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2639

Testcase 2639 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2640

Testcase 2640 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2641

Testcase 2641 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2642

Testcase 2642 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2643

Testcase 2643 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2644

Testcase 2644 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2645

Testcase 2645 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2646

Testcase 2646 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2647

Testcase 2647 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2648

Testcase 2648 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2649

Testcase 2649 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2650

Testcase 2650 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2651

Testcase 2651 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2652

Testcase 2652 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2653

Testcase 2653 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2654

Testcase 2654 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2655

Testcase 2655 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2656

Testcase 2656 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2657

Testcase 2657 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2658

Testcase 2658 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2659

Testcase 2659 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2660

Testcase 2660 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2661

Testcase 2661 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2662

Testcase 2662 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2663

Testcase 2663 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2664

Testcase 2664 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2665

Testcase 2665 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2666

Testcase 2666 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2667

Testcase 2667 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2668

Testcase 2668 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2669

Testcase 2669 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2670

Testcase 2670 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2671

Testcase 2671 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2672

Testcase 2672 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2673

Testcase 2673 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2674

Testcase 2674 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2675

Testcase 2675 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2676

Testcase 2676 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2677

Testcase 2677 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2678

Testcase 2678 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2679

Testcase 2679 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2680

Testcase 2680 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2681

Testcase 2681 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2682

Testcase 2682 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2683

Testcase 2683 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2684

Testcase 2684 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2685

Testcase 2685 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2686

Testcase 2686 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2687

Testcase 2687 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2688

Testcase 2688 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2689

Testcase 2689 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2690

Testcase 2690 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2691

Testcase 2691 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2692

Testcase 2692 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2693

Testcase 2693 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2694

Testcase 2694 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2695

Testcase 2695 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2696

Testcase 2696 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2697

Testcase 2697 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2698

Testcase 2698 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2699

Testcase 2699 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2700

Testcase 2700 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2701

Testcase 2701 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2702

Testcase 2702 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2703

Testcase 2703 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2704

Testcase 2704 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2705

Testcase 2705 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2706

Testcase 2706 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2707

Testcase 2707 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2708

Testcase 2708 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2709

Testcase 2709 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2710

Testcase 2710 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2711

Testcase 2711 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2712

Testcase 2712 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2713

Testcase 2713 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2714

Testcase 2714 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2715

Testcase 2715 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2716

Testcase 2716 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2717

Testcase 2717 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2718

Testcase 2718 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2719

Testcase 2719 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2720

Testcase 2720 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2721

Testcase 2721 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2722

Testcase 2722 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2723

Testcase 2723 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2724

Testcase 2724 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2725

Testcase 2725 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2726

Testcase 2726 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2727

Testcase 2727 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2728

Testcase 2728 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2729

Testcase 2729 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2730

Testcase 2730 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2731

Testcase 2731 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2732

Testcase 2732 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2733

Testcase 2733 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2734

Testcase 2734 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2735

Testcase 2735 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2736

Testcase 2736 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2737

Testcase 2737 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2738

Testcase 2738 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2739

Testcase 2739 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2740

Testcase 2740 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2741

Testcase 2741 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2742

Testcase 2742 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2743

Testcase 2743 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2744

Testcase 2744 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2745

Testcase 2745 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2746

Testcase 2746 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2747

Testcase 2747 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2748

Testcase 2748 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2749

Testcase 2749 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2750

Testcase 2750 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2751

Testcase 2751 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2752

Testcase 2752 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2753

Testcase 2753 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2754

Testcase 2754 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2755

Testcase 2755 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2756

Testcase 2756 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2757

Testcase 2757 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2758

Testcase 2758 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2759

Testcase 2759 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2760

Testcase 2760 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2761

Testcase 2761 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2762

Testcase 2762 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2763

Testcase 2763 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2764

Testcase 2764 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2765

Testcase 2765 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2766

Testcase 2766 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2767

Testcase 2767 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2768

Testcase 2768 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2769

Testcase 2769 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2770

Testcase 2770 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2771

Testcase 2771 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2772

Testcase 2772 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2773

Testcase 2773 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2774

Testcase 2774 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2775

Testcase 2775 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2776

Testcase 2776 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2777

Testcase 2777 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2778

Testcase 2778 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2779

Testcase 2779 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2780

Testcase 2780 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2781

Testcase 2781 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2782

Testcase 2782 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2783

Testcase 2783 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2784

Testcase 2784 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2785

Testcase 2785 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2786

Testcase 2786 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2787

Testcase 2787 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2788

Testcase 2788 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2789

Testcase 2789 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2790

Testcase 2790 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2791

Testcase 2791 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2792

Testcase 2792 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2793

Testcase 2793 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2794

Testcase 2794 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2795

Testcase 2795 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2796

Testcase 2796 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2797

Testcase 2797 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2798

Testcase 2798 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2799

Testcase 2799 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2800

Testcase 2800 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2801

Testcase 2801 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2802

Testcase 2802 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2803

Testcase 2803 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2804

Testcase 2804 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2805

Testcase 2805 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2806

Testcase 2806 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2807

Testcase 2807 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2808

Testcase 2808 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2809

Testcase 2809 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2810

Testcase 2810 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2811

Testcase 2811 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2812

Testcase 2812 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2813

Testcase 2813 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2814

Testcase 2814 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2815

Testcase 2815 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2816

Testcase 2816 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2817

Testcase 2817 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2818

Testcase 2818 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2819

Testcase 2819 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2820

Testcase 2820 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2821

Testcase 2821 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2822

Testcase 2822 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2823

Testcase 2823 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2824

Testcase 2824 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2825

Testcase 2825 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2826

Testcase 2826 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2827

Testcase 2827 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2828

Testcase 2828 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2829

Testcase 2829 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2830

Testcase 2830 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2831

Testcase 2831 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2832

Testcase 2832 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2833

Testcase 2833 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2834

Testcase 2834 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2835

Testcase 2835 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2836

Testcase 2836 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2837

Testcase 2837 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2838

Testcase 2838 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2839

Testcase 2839 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2840

Testcase 2840 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2841

Testcase 2841 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2842

Testcase 2842 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2843

Testcase 2843 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2844

Testcase 2844 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2845

Testcase 2845 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2846

Testcase 2846 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2847

Testcase 2847 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2848

Testcase 2848 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2849

Testcase 2849 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2850

Testcase 2850 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2851

Testcase 2851 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2852

Testcase 2852 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2853

Testcase 2853 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2854

Testcase 2854 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2855

Testcase 2855 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2856

Testcase 2856 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2857

Testcase 2857 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2858

Testcase 2858 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2859

Testcase 2859 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2860

Testcase 2860 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2861

Testcase 2861 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2862

Testcase 2862 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2863

Testcase 2863 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2864

Testcase 2864 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2865

Testcase 2865 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2866

Testcase 2866 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2867

Testcase 2867 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2868

Testcase 2868 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2869

Testcase 2869 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2870

Testcase 2870 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2871

Testcase 2871 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2872

Testcase 2872 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2873

Testcase 2873 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2874

Testcase 2874 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2875

Testcase 2875 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2876

Testcase 2876 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2877

Testcase 2877 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2878

Testcase 2878 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2879

Testcase 2879 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2880

Testcase 2880 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2881

Testcase 2881 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2882

Testcase 2882 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2883

Testcase 2883 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2884

Testcase 2884 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2885

Testcase 2885 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2886

Testcase 2886 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2887

Testcase 2887 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2888

Testcase 2888 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2889

Testcase 2889 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2890

Testcase 2890 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2891

Testcase 2891 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2892

Testcase 2892 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2893

Testcase 2893 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2894

Testcase 2894 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2895

Testcase 2895 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2896

Testcase 2896 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2897

Testcase 2897 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2898

Testcase 2898 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2899

Testcase 2899 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2900

Testcase 2900 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2901

Testcase 2901 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2902

Testcase 2902 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2903

Testcase 2903 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2904

Testcase 2904 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2905

Testcase 2905 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2906

Testcase 2906 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2907

Testcase 2907 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2908

Testcase 2908 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2909

Testcase 2909 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2910

Testcase 2910 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2911

Testcase 2911 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2912

Testcase 2912 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2913

Testcase 2913 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2914

Testcase 2914 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2915

Testcase 2915 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2916

Testcase 2916 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2917

Testcase 2917 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2918

Testcase 2918 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2919

Testcase 2919 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2920

Testcase 2920 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2921

Testcase 2921 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2922

Testcase 2922 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2923

Testcase 2923 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2924

Testcase 2924 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2925

Testcase 2925 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2926

Testcase 2926 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2927

Testcase 2927 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2928

Testcase 2928 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2929

Testcase 2929 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2930

Testcase 2930 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2931

Testcase 2931 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2932

Testcase 2932 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2933

Testcase 2933 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2934

Testcase 2934 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2935

Testcase 2935 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2936

Testcase 2936 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2937

Testcase 2937 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2938

Testcase 2938 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2939

Testcase 2939 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2940

Testcase 2940 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2941

Testcase 2941 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2942

Testcase 2942 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2943

Testcase 2943 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2944

Testcase 2944 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2945

Testcase 2945 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2946

Testcase 2946 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2947

Testcase 2947 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2948

Testcase 2948 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2949

Testcase 2949 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2950

Testcase 2950 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2951

Testcase 2951 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2952

Testcase 2952 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2953

Testcase 2953 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2954

Testcase 2954 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2955

Testcase 2955 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2956

Testcase 2956 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2957

Testcase 2957 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2958

Testcase 2958 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2959

Testcase 2959 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2960

Testcase 2960 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2961

Testcase 2961 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2962

Testcase 2962 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2963

Testcase 2963 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2964

Testcase 2964 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2965

Testcase 2965 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2966

Testcase 2966 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2967

Testcase 2967 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2968

Testcase 2968 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2969

Testcase 2969 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2970

Testcase 2970 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2971

Testcase 2971 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2972

Testcase 2972 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2973

Testcase 2973 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2974

Testcase 2974 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2975

Testcase 2975 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2976

Testcase 2976 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2977

Testcase 2977 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2978

Testcase 2978 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2979

Testcase 2979 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2980

Testcase 2980 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2981

Testcase 2981 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2982

Testcase 2982 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2983

Testcase 2983 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2984

Testcase 2984 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2985

Testcase 2985 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2986

Testcase 2986 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2987

Testcase 2987 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2988

Testcase 2988 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2989

Testcase 2989 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2990

Testcase 2990 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2991

Testcase 2991 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2992

Testcase 2992 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2993

Testcase 2993 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2994

Testcase 2994 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2995

Testcase 2995 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2996

Testcase 2996 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2997

Testcase 2997 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2998

Testcase 2998 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc2999

Testcase 2999 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3000

Testcase 3000 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3001

Testcase 3001 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3002

Testcase 3002 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3003

Testcase 3003 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3004

Testcase 3004 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3005

Testcase 3005 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3006

Testcase 3006 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3007

Testcase 3007 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3008

Testcase 3008 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3009

Testcase 3009 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3010

Testcase 3010 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3011

Testcase 3011 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3012

Testcase 3012 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3013

Testcase 3013 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3014

Testcase 3014 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3015

Testcase 3015 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3016

Testcase 3016 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3017

Testcase 3017 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3018

Testcase 3018 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3019

Testcase 3019 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3020

Testcase 3020 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3021

Testcase 3021 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3022

Testcase 3022 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3023

Testcase 3023 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3024

Testcase 3024 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3025

Testcase 3025 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3026

Testcase 3026 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3027

Testcase 3027 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3028

Testcase 3028 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3029

Testcase 3029 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3030

Testcase 3030 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3031

Testcase 3031 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3032

Testcase 3032 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3033

Testcase 3033 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3034

Testcase 3034 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3035

Testcase 3035 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3036

Testcase 3036 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3037

Testcase 3037 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3038

Testcase 3038 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3039

Testcase 3039 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3040

Testcase 3040 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3041

Testcase 3041 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3042

Testcase 3042 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3043

Testcase 3043 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3044

Testcase 3044 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3045

Testcase 3045 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3046

Testcase 3046 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3047

Testcase 3047 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3048

Testcase 3048 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3049

Testcase 3049 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3050

Testcase 3050 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3051

Testcase 3051 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3052

Testcase 3052 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3053

Testcase 3053 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3054

Testcase 3054 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3055

Testcase 3055 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3056

Testcase 3056 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3057

Testcase 3057 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3058

Testcase 3058 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3059

Testcase 3059 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3060

Testcase 3060 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3061

Testcase 3061 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3062

Testcase 3062 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3063

Testcase 3063 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3064

Testcase 3064 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3065

Testcase 3065 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3066

Testcase 3066 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3067

Testcase 3067 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3068

Testcase 3068 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3069

Testcase 3069 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3070

Testcase 3070 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3071

Testcase 3071 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3072

Testcase 3072 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3073

Testcase 3073 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3074

Testcase 3074 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3075

Testcase 3075 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3076

Testcase 3076 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3077

Testcase 3077 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3078

Testcase 3078 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3079

Testcase 3079 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3080

Testcase 3080 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3081

Testcase 3081 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3082

Testcase 3082 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3083

Testcase 3083 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3084

Testcase 3084 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3085

Testcase 3085 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3086

Testcase 3086 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3087

Testcase 3087 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3088

Testcase 3088 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3089

Testcase 3089 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3090

Testcase 3090 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3091

Testcase 3091 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3092

Testcase 3092 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3093

Testcase 3093 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3094

Testcase 3094 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3095

Testcase 3095 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3096

Testcase 3096 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3097

Testcase 3097 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3098

Testcase 3098 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3099

Testcase 3099 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3100

Testcase 3100 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3101

Testcase 3101 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3102

Testcase 3102 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3103

Testcase 3103 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3104

Testcase 3104 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3105

Testcase 3105 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3106

Testcase 3106 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3107

Testcase 3107 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3108

Testcase 3108 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3109

Testcase 3109 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3110

Testcase 3110 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3111

Testcase 3111 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3112

Testcase 3112 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3113

Testcase 3113 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3114

Testcase 3114 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3115

Testcase 3115 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3116

Testcase 3116 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3117

Testcase 3117 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3118

Testcase 3118 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3119

Testcase 3119 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3120

Testcase 3120 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3121

Testcase 3121 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3122

Testcase 3122 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3123

Testcase 3123 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3124

Testcase 3124 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3125

Testcase 3125 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3126

Testcase 3126 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3127

Testcase 3127 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3128

Testcase 3128 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3129

Testcase 3129 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3130

Testcase 3130 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3131

Testcase 3131 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3132

Testcase 3132 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3133

Testcase 3133 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3134

Testcase 3134 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3135

Testcase 3135 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3136

Testcase 3136 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3137

Testcase 3137 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3138

Testcase 3138 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3139

Testcase 3139 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3140

Testcase 3140 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3141

Testcase 3141 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3142

Testcase 3142 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3143

Testcase 3143 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3144

Testcase 3144 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3145

Testcase 3145 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3146

Testcase 3146 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3147

Testcase 3147 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3148

Testcase 3148 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3149

Testcase 3149 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3150

Testcase 3150 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3151

Testcase 3151 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3152

Testcase 3152 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3153

Testcase 3153 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3154

Testcase 3154 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3155

Testcase 3155 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3156

Testcase 3156 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3157

Testcase 3157 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3158

Testcase 3158 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3159

Testcase 3159 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3160

Testcase 3160 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3161

Testcase 3161 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3162

Testcase 3162 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3163

Testcase 3163 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3164

Testcase 3164 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3165

Testcase 3165 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3166

Testcase 3166 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3167

Testcase 3167 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3168

Testcase 3168 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3169

Testcase 3169 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3170

Testcase 3170 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3171

Testcase 3171 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3172

Testcase 3172 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3173

Testcase 3173 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3174

Testcase 3174 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3175

Testcase 3175 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3176

Testcase 3176 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3177

Testcase 3177 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3178

Testcase 3178 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3179

Testcase 3179 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3180

Testcase 3180 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3181

Testcase 3181 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3182

Testcase 3182 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3183

Testcase 3183 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3184

Testcase 3184 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3185

Testcase 3185 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3186

Testcase 3186 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3187

Testcase 3187 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3188

Testcase 3188 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3189

Testcase 3189 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3190

Testcase 3190 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3191

Testcase 3191 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3192

Testcase 3192 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3193

Testcase 3193 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3194

Testcase 3194 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3195

Testcase 3195 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3196

Testcase 3196 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3197

Testcase 3197 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3198

Testcase 3198 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3199

Testcase 3199 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3200

Testcase 3200 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3201

Testcase 3201 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3202

Testcase 3202 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3203

Testcase 3203 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3204

Testcase 3204 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3205

Testcase 3205 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3206

Testcase 3206 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3207

Testcase 3207 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3208

Testcase 3208 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3209

Testcase 3209 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3210

Testcase 3210 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3211

Testcase 3211 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3212

Testcase 3212 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3213

Testcase 3213 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3214

Testcase 3214 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3215

Testcase 3215 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3216

Testcase 3216 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3217

Testcase 3217 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3218

Testcase 3218 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3219

Testcase 3219 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3220

Testcase 3220 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3221

Testcase 3221 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3222

Testcase 3222 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3223

Testcase 3223 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3224

Testcase 3224 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3225

Testcase 3225 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3226

Testcase 3226 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3227

Testcase 3227 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3228

Testcase 3228 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3229

Testcase 3229 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3230

Testcase 3230 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3231

Testcase 3231 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3232

Testcase 3232 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3233

Testcase 3233 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3234

Testcase 3234 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3235

Testcase 3235 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3236

Testcase 3236 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3237

Testcase 3237 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3238

Testcase 3238 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3239

Testcase 3239 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3240

Testcase 3240 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3241

Testcase 3241 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3242

Testcase 3242 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3243

Testcase 3243 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3244

Testcase 3244 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3245

Testcase 3245 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3246

Testcase 3246 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3247

Testcase 3247 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3248

Testcase 3248 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3249

Testcase 3249 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3250

Testcase 3250 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3251

Testcase 3251 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3252

Testcase 3252 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3253

Testcase 3253 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3254

Testcase 3254 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3255

Testcase 3255 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3256

Testcase 3256 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3257

Testcase 3257 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3258

Testcase 3258 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3259

Testcase 3259 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3260

Testcase 3260 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3261

Testcase 3261 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3262

Testcase 3262 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3263

Testcase 3263 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3264

Testcase 3264 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3265

Testcase 3265 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3266

Testcase 3266 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3267

Testcase 3267 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3268

Testcase 3268 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3269

Testcase 3269 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3270

Testcase 3270 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3271

Testcase 3271 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3272

Testcase 3272 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3273

Testcase 3273 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3274

Testcase 3274 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3275

Testcase 3275 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3276

Testcase 3276 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3277

Testcase 3277 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3278

Testcase 3278 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3279

Testcase 3279 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3280

Testcase 3280 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3281

Testcase 3281 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3282

Testcase 3282 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3283

Testcase 3283 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3284

Testcase 3284 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3285

Testcase 3285 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3286

Testcase 3286 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3287

Testcase 3287 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3288

Testcase 3288 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3289

Testcase 3289 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3290

Testcase 3290 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3291

Testcase 3291 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3292

Testcase 3292 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3293

Testcase 3293 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3294

Testcase 3294 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3295

Testcase 3295 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3296

Testcase 3296 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3297

Testcase 3297 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3298

Testcase 3298 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3299

Testcase 3299 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3300

Testcase 3300 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3301

Testcase 3301 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3302

Testcase 3302 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3303

Testcase 3303 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3304

Testcase 3304 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3305

Testcase 3305 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3306

Testcase 3306 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3307

Testcase 3307 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3308

Testcase 3308 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3309

Testcase 3309 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3310

Testcase 3310 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3311

Testcase 3311 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3312

Testcase 3312 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3313

Testcase 3313 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3314

Testcase 3314 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3315

Testcase 3315 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3316

Testcase 3316 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3317

Testcase 3317 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3318

Testcase 3318 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3319

Testcase 3319 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3320

Testcase 3320 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3321

Testcase 3321 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3322

Testcase 3322 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3323

Testcase 3323 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3324

Testcase 3324 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3325

Testcase 3325 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3326

Testcase 3326 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3327

Testcase 3327 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3328

Testcase 3328 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3329

Testcase 3329 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3330

Testcase 3330 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3331

Testcase 3331 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3332

Testcase 3332 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3333

Testcase 3333 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3334

Testcase 3334 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3335

Testcase 3335 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3336

Testcase 3336 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3337

Testcase 3337 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3338

Testcase 3338 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3339

Testcase 3339 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3340

Testcase 3340 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3341

Testcase 3341 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3342

Testcase 3342 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3343

Testcase 3343 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3344

Testcase 3344 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3345

Testcase 3345 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3346

Testcase 3346 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3347

Testcase 3347 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3348

Testcase 3348 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3349

Testcase 3349 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3350

Testcase 3350 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3351

Testcase 3351 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3352

Testcase 3352 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3353

Testcase 3353 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3354

Testcase 3354 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3355

Testcase 3355 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3356

Testcase 3356 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3357

Testcase 3357 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3358

Testcase 3358 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3359

Testcase 3359 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3360

Testcase 3360 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3361

Testcase 3361 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3362

Testcase 3362 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3363

Testcase 3363 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3364

Testcase 3364 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3365

Testcase 3365 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3366

Testcase 3366 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3367

Testcase 3367 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3368

Testcase 3368 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3369

Testcase 3369 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3370

Testcase 3370 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3371

Testcase 3371 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3372

Testcase 3372 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3373

Testcase 3373 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3374

Testcase 3374 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3375

Testcase 3375 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3376

Testcase 3376 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3377

Testcase 3377 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3378

Testcase 3378 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3379

Testcase 3379 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3380

Testcase 3380 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3381

Testcase 3381 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3382

Testcase 3382 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3383

Testcase 3383 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3384

Testcase 3384 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3385

Testcase 3385 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3386

Testcase 3386 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3387

Testcase 3387 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3388

Testcase 3388 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3389

Testcase 3389 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3390

Testcase 3390 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3391

Testcase 3391 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3392

Testcase 3392 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3393

Testcase 3393 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3394

Testcase 3394 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3395

Testcase 3395 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3396

Testcase 3396 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3397

Testcase 3397 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3398

Testcase 3398 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3399

Testcase 3399 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3400

Testcase 3400 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3401

Testcase 3401 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3402

Testcase 3402 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3403

Testcase 3403 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3404

Testcase 3404 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3405

Testcase 3405 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3406

Testcase 3406 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3407

Testcase 3407 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3408

Testcase 3408 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3409

Testcase 3409 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3410

Testcase 3410 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3411

Testcase 3411 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3412

Testcase 3412 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3413

Testcase 3413 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3414

Testcase 3414 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3415

Testcase 3415 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3416

Testcase 3416 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3417

Testcase 3417 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3418

Testcase 3418 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3419

Testcase 3419 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3420

Testcase 3420 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3421

Testcase 3421 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3422

Testcase 3422 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3423

Testcase 3423 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3424

Testcase 3424 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3425

Testcase 3425 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3426

Testcase 3426 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3427

Testcase 3427 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3428

Testcase 3428 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3429

Testcase 3429 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3430

Testcase 3430 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3431

Testcase 3431 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3432

Testcase 3432 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3433

Testcase 3433 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3434

Testcase 3434 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3435

Testcase 3435 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3436

Testcase 3436 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3437

Testcase 3437 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3438

Testcase 3438 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3439

Testcase 3439 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3440

Testcase 3440 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3441

Testcase 3441 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3442

Testcase 3442 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3443

Testcase 3443 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3444

Testcase 3444 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3445

Testcase 3445 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3446

Testcase 3446 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3447

Testcase 3447 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3448

Testcase 3448 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3449

Testcase 3449 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3450

Testcase 3450 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3451

Testcase 3451 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3452

Testcase 3452 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3453

Testcase 3453 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3454

Testcase 3454 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3455

Testcase 3455 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3456

Testcase 3456 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3457

Testcase 3457 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3458

Testcase 3458 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3459

Testcase 3459 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3460

Testcase 3460 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3461

Testcase 3461 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3462

Testcase 3462 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3463

Testcase 3463 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3464

Testcase 3464 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3465

Testcase 3465 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3466

Testcase 3466 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3467

Testcase 3467 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3468

Testcase 3468 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3469

Testcase 3469 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3470

Testcase 3470 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3471

Testcase 3471 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3472

Testcase 3472 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3473

Testcase 3473 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3474

Testcase 3474 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3475

Testcase 3475 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3476

Testcase 3476 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3477

Testcase 3477 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3478

Testcase 3478 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3479

Testcase 3479 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3480

Testcase 3480 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3481

Testcase 3481 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3482

Testcase 3482 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3483

Testcase 3483 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3484

Testcase 3484 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3485

Testcase 3485 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3486

Testcase 3486 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3487

Testcase 3487 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3488

Testcase 3488 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3489

Testcase 3489 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3490

Testcase 3490 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3491

Testcase 3491 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3492

Testcase 3492 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3493

Testcase 3493 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3494

Testcase 3494 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3495

Testcase 3495 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3496

Testcase 3496 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3497

Testcase 3497 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3498

Testcase 3498 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3499

Testcase 3499 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3500

Testcase 3500 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3501

Testcase 3501 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3502

Testcase 3502 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3503

Testcase 3503 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3504

Testcase 3504 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3505

Testcase 3505 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3506

Testcase 3506 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3507

Testcase 3507 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3508

Testcase 3508 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3509

Testcase 3509 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3510

Testcase 3510 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3511

Testcase 3511 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3512

Testcase 3512 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3513

Testcase 3513 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3514

Testcase 3514 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3515

Testcase 3515 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3516

Testcase 3516 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3517

Testcase 3517 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3518

Testcase 3518 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3519

Testcase 3519 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3520

Testcase 3520 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3521

Testcase 3521 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3522

Testcase 3522 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3523

Testcase 3523 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3524

Testcase 3524 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3525

Testcase 3525 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3526

Testcase 3526 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3527

Testcase 3527 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3528

Testcase 3528 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3529

Testcase 3529 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3530

Testcase 3530 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3531

Testcase 3531 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3532

Testcase 3532 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3533

Testcase 3533 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3534

Testcase 3534 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3535

Testcase 3535 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3536

Testcase 3536 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3537

Testcase 3537 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3538

Testcase 3538 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3539

Testcase 3539 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3540

Testcase 3540 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3541

Testcase 3541 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3542

Testcase 3542 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3543

Testcase 3543 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3544

Testcase 3544 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3545

Testcase 3545 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3546

Testcase 3546 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3547

Testcase 3547 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3548

Testcase 3548 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3549

Testcase 3549 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3550

Testcase 3550 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3551

Testcase 3551 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3552

Testcase 3552 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3553

Testcase 3553 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3554

Testcase 3554 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3555

Testcase 3555 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3556

Testcase 3556 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3557

Testcase 3557 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3558

Testcase 3558 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3559

Testcase 3559 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3560

Testcase 3560 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3561

Testcase 3561 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3562

Testcase 3562 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3563

Testcase 3563 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3564

Testcase 3564 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3565

Testcase 3565 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3566

Testcase 3566 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3567

Testcase 3567 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3568

Testcase 3568 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3569

Testcase 3569 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3570

Testcase 3570 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3571

Testcase 3571 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3572

Testcase 3572 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3573

Testcase 3573 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3574

Testcase 3574 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3575

Testcase 3575 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3576

Testcase 3576 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3577

Testcase 3577 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3578

Testcase 3578 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3579

Testcase 3579 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3580

Testcase 3580 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3581

Testcase 3581 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3582

Testcase 3582 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3583

Testcase 3583 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3584

Testcase 3584 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3585

Testcase 3585 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3586

Testcase 3586 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3587

Testcase 3587 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3588

Testcase 3588 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3589

Testcase 3589 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3590

Testcase 3590 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3591

Testcase 3591 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3592

Testcase 3592 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3593

Testcase 3593 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3594

Testcase 3594 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3595

Testcase 3595 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3596

Testcase 3596 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3597

Testcase 3597 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3598

Testcase 3598 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3599

Testcase 3599 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3600

Testcase 3600 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3601

Testcase 3601 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3602

Testcase 3602 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3603

Testcase 3603 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3604

Testcase 3604 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3605

Testcase 3605 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3606

Testcase 3606 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3607

Testcase 3607 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3608

Testcase 3608 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3609

Testcase 3609 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3610

Testcase 3610 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3611

Testcase 3611 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3612

Testcase 3612 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3613

Testcase 3613 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3614

Testcase 3614 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3615

Testcase 3615 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3616

Testcase 3616 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3617

Testcase 3617 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3618

Testcase 3618 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3619

Testcase 3619 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3620

Testcase 3620 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3621

Testcase 3621 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3622

Testcase 3622 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3623

Testcase 3623 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3624

Testcase 3624 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3625

Testcase 3625 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3626

Testcase 3626 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3627

Testcase 3627 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3628

Testcase 3628 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3629

Testcase 3629 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3630

Testcase 3630 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3631

Testcase 3631 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3632

Testcase 3632 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3633

Testcase 3633 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3634

Testcase 3634 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3635

Testcase 3635 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3636

Testcase 3636 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3637

Testcase 3637 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3638

Testcase 3638 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3639

Testcase 3639 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3640

Testcase 3640 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3641

Testcase 3641 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3642

Testcase 3642 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3643

Testcase 3643 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3644

Testcase 3644 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3645

Testcase 3645 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3646

Testcase 3646 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3647

Testcase 3647 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3648

Testcase 3648 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3649

Testcase 3649 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3650

Testcase 3650 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3651

Testcase 3651 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3652

Testcase 3652 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3653

Testcase 3653 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3654

Testcase 3654 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3655

Testcase 3655 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3656

Testcase 3656 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3657

Testcase 3657 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3658

Testcase 3658 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3659

Testcase 3659 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3660

Testcase 3660 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3661

Testcase 3661 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3662

Testcase 3662 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3663

Testcase 3663 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3664

Testcase 3664 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3665

Testcase 3665 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3666

Testcase 3666 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3667

Testcase 3667 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3668

Testcase 3668 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3669

Testcase 3669 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3670

Testcase 3670 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3671

Testcase 3671 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3672

Testcase 3672 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3673

Testcase 3673 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3674

Testcase 3674 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3675

Testcase 3675 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3676

Testcase 3676 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3677

Testcase 3677 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3678

Testcase 3678 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3679

Testcase 3679 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3680

Testcase 3680 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3681

Testcase 3681 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3682

Testcase 3682 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3683

Testcase 3683 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3684

Testcase 3684 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3685

Testcase 3685 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3686

Testcase 3686 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3687

Testcase 3687 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3688

Testcase 3688 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3689

Testcase 3689 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3690

Testcase 3690 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3691

Testcase 3691 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3692

Testcase 3692 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3693

Testcase 3693 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3694

Testcase 3694 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3695

Testcase 3695 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3696

Testcase 3696 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3697

Testcase 3697 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3698

Testcase 3698 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3699

Testcase 3699 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3700

Testcase 3700 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3701

Testcase 3701 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3702

Testcase 3702 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3703

Testcase 3703 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3704

Testcase 3704 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3705

Testcase 3705 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3706

Testcase 3706 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3707

Testcase 3707 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3708

Testcase 3708 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3709

Testcase 3709 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3710

Testcase 3710 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3711

Testcase 3711 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3712

Testcase 3712 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3713

Testcase 3713 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3714

Testcase 3714 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3715

Testcase 3715 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3716

Testcase 3716 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3717

Testcase 3717 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3718

Testcase 3718 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3719

Testcase 3719 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3720

Testcase 3720 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3721

Testcase 3721 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3722

Testcase 3722 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3723

Testcase 3723 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3724

Testcase 3724 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3725

Testcase 3725 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3726

Testcase 3726 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3727

Testcase 3727 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3728

Testcase 3728 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3729

Testcase 3729 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3730

Testcase 3730 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3731

Testcase 3731 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3732

Testcase 3732 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3733

Testcase 3733 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3734

Testcase 3734 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3735

Testcase 3735 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3736

Testcase 3736 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3737

Testcase 3737 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3738

Testcase 3738 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3739

Testcase 3739 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3740

Testcase 3740 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3741

Testcase 3741 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3742

Testcase 3742 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3743

Testcase 3743 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3744

Testcase 3744 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3745

Testcase 3745 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3746

Testcase 3746 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3747

Testcase 3747 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3748

Testcase 3748 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3749

Testcase 3749 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3750

Testcase 3750 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3751

Testcase 3751 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3752

Testcase 3752 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3753

Testcase 3753 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3754

Testcase 3754 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3755

Testcase 3755 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3756

Testcase 3756 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3757

Testcase 3757 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3758

Testcase 3758 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3759

Testcase 3759 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3760

Testcase 3760 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3761

Testcase 3761 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3762

Testcase 3762 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3763

Testcase 3763 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3764

Testcase 3764 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3765

Testcase 3765 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3766

Testcase 3766 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3767

Testcase 3767 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3768

Testcase 3768 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3769

Testcase 3769 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3770

Testcase 3770 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3771

Testcase 3771 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3772

Testcase 3772 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3773

Testcase 3773 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3774

Testcase 3774 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3775

Testcase 3775 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3776

Testcase 3776 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3777

Testcase 3777 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3778

Testcase 3778 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3779

Testcase 3779 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3780

Testcase 3780 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3781

Testcase 3781 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3782

Testcase 3782 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3783

Testcase 3783 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3784

Testcase 3784 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3785

Testcase 3785 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3786

Testcase 3786 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3787

Testcase 3787 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3788

Testcase 3788 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3789

Testcase 3789 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3790

Testcase 3790 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3791

Testcase 3791 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3792

Testcase 3792 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3793

Testcase 3793 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3794

Testcase 3794 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3795

Testcase 3795 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3796

Testcase 3796 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3797

Testcase 3797 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3798

Testcase 3798 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3799

Testcase 3799 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3800

Testcase 3800 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3801

Testcase 3801 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3802

Testcase 3802 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3803

Testcase 3803 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3804

Testcase 3804 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3805

Testcase 3805 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3806

Testcase 3806 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3807

Testcase 3807 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3808

Testcase 3808 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3809

Testcase 3809 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3810

Testcase 3810 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3811

Testcase 3811 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3812

Testcase 3812 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3813

Testcase 3813 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3814

Testcase 3814 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3815

Testcase 3815 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3816

Testcase 3816 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3817

Testcase 3817 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3818

Testcase 3818 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3819

Testcase 3819 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3820

Testcase 3820 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3821

Testcase 3821 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3822

Testcase 3822 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3823

Testcase 3823 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3824

Testcase 3824 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3825

Testcase 3825 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3826

Testcase 3826 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3827

Testcase 3827 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3828

Testcase 3828 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3829

Testcase 3829 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3830

Testcase 3830 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3831

Testcase 3831 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3832

Testcase 3832 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3833

Testcase 3833 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3834

Testcase 3834 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3835

Testcase 3835 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3836

Testcase 3836 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3837

Testcase 3837 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3838

Testcase 3838 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3839

Testcase 3839 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3840

Testcase 3840 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3841

Testcase 3841 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3842

Testcase 3842 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3843

Testcase 3843 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3844

Testcase 3844 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3845

Testcase 3845 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3846

Testcase 3846 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3847

Testcase 3847 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3848

Testcase 3848 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3849

Testcase 3849 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3850

Testcase 3850 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3851

Testcase 3851 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3852

Testcase 3852 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3853

Testcase 3853 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3854

Testcase 3854 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3855

Testcase 3855 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3856

Testcase 3856 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3857

Testcase 3857 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3858

Testcase 3858 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3859

Testcase 3859 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3860

Testcase 3860 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3861

Testcase 3861 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3862

Testcase 3862 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3863

Testcase 3863 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3864

Testcase 3864 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3865

Testcase 3865 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3866

Testcase 3866 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3867

Testcase 3867 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3868

Testcase 3868 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3869

Testcase 3869 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3870

Testcase 3870 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3871

Testcase 3871 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3872

Testcase 3872 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3873

Testcase 3873 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3874

Testcase 3874 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3875

Testcase 3875 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3876

Testcase 3876 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3877

Testcase 3877 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3878

Testcase 3878 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3879

Testcase 3879 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3880

Testcase 3880 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3881

Testcase 3881 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3882

Testcase 3882 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3883

Testcase 3883 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3884

Testcase 3884 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3885

Testcase 3885 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3886

Testcase 3886 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3887

Testcase 3887 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3888

Testcase 3888 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3889

Testcase 3889 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3890

Testcase 3890 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3891

Testcase 3891 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3892

Testcase 3892 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3893

Testcase 3893 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3894

Testcase 3894 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3895

Testcase 3895 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3896

Testcase 3896 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3897

Testcase 3897 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3898

Testcase 3898 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3899

Testcase 3899 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3900

Testcase 3900 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3901

Testcase 3901 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3902

Testcase 3902 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3903

Testcase 3903 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3904

Testcase 3904 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3905

Testcase 3905 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3906

Testcase 3906 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3907

Testcase 3907 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3908

Testcase 3908 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3909

Testcase 3909 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3910

Testcase 3910 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3911

Testcase 3911 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3912

Testcase 3912 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3913

Testcase 3913 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3914

Testcase 3914 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3915

Testcase 3915 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3916

Testcase 3916 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3917

Testcase 3917 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3918

Testcase 3918 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3919

Testcase 3919 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3920

Testcase 3920 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3921

Testcase 3921 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3922

Testcase 3922 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3923

Testcase 3923 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3924

Testcase 3924 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3925

Testcase 3925 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3926

Testcase 3926 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3927

Testcase 3927 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3928

Testcase 3928 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3929

Testcase 3929 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3930

Testcase 3930 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3931

Testcase 3931 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3932

Testcase 3932 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3933

Testcase 3933 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3934

Testcase 3934 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3935

Testcase 3935 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3936

Testcase 3936 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3937

Testcase 3937 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3938

Testcase 3938 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3939

Testcase 3939 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3940

Testcase 3940 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3941

Testcase 3941 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3942

Testcase 3942 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3943

Testcase 3943 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3944

Testcase 3944 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3945

Testcase 3945 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3946

Testcase 3946 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3947

Testcase 3947 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3948

Testcase 3948 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3949

Testcase 3949 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3950

Testcase 3950 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3951

Testcase 3951 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3952

Testcase 3952 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3953

Testcase 3953 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3954

Testcase 3954 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3955

Testcase 3955 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3956

Testcase 3956 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3957

Testcase 3957 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3958

Testcase 3958 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3959

Testcase 3959 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3960

Testcase 3960 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3961

Testcase 3961 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3962

Testcase 3962 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3963

Testcase 3963 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3964

Testcase 3964 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3965

Testcase 3965 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3966

Testcase 3966 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3967

Testcase 3967 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3968

Testcase 3968 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3969

Testcase 3969 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3970

Testcase 3970 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3971

Testcase 3971 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3972

Testcase 3972 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3973

Testcase 3973 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3974

Testcase 3974 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3975

Testcase 3975 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3976

Testcase 3976 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3977

Testcase 3977 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3978

Testcase 3978 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3979

Testcase 3979 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3980

Testcase 3980 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3981

Testcase 3981 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3982

Testcase 3982 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3983

Testcase 3983 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3984

Testcase 3984 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3985

Testcase 3985 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3986

Testcase 3986 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3987

Testcase 3987 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3988

Testcase 3988 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3989

Testcase 3989 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3990

Testcase 3990 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3991

Testcase 3991 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3992

Testcase 3992 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3993

Testcase 3993 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3994

Testcase 3994 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3995

Testcase 3995 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3996

Testcase 3996 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3997

Testcase 3997 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3998

Testcase 3998 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc3999

Testcase 3999 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4000

Testcase 4000 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4001

Testcase 4001 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4002

Testcase 4002 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4003

Testcase 4003 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4004

Testcase 4004 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4005

Testcase 4005 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4006

Testcase 4006 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4007

Testcase 4007 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4008

Testcase 4008 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4009

Testcase 4009 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4010

Testcase 4010 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4011

Testcase 4011 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4012

Testcase 4012 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4013

Testcase 4013 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4014

Testcase 4014 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4015

Testcase 4015 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4016

Testcase 4016 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4017

Testcase 4017 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4018

Testcase 4018 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4019

Testcase 4019 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4020

Testcase 4020 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4021

Testcase 4021 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4022

Testcase 4022 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4023

Testcase 4023 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4024

Testcase 4024 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4025

Testcase 4025 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4026

Testcase 4026 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4027

Testcase 4027 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4028

Testcase 4028 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4029

Testcase 4029 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4030

Testcase 4030 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4031

Testcase 4031 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4032

Testcase 4032 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4033

Testcase 4033 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4034

Testcase 4034 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4035

Testcase 4035 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4036

Testcase 4036 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4037

Testcase 4037 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4038

Testcase 4038 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4039

Testcase 4039 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4040

Testcase 4040 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4041

Testcase 4041 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4042

Testcase 4042 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4043

Testcase 4043 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4044

Testcase 4044 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4045

Testcase 4045 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4046

Testcase 4046 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4047

Testcase 4047 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4048

Testcase 4048 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4049

Testcase 4049 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4050

Testcase 4050 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4051

Testcase 4051 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4052

Testcase 4052 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4053

Testcase 4053 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4054

Testcase 4054 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4055

Testcase 4055 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4056

Testcase 4056 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4057

Testcase 4057 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4058

Testcase 4058 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4059

Testcase 4059 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4060

Testcase 4060 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4061

Testcase 4061 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4062

Testcase 4062 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4063

Testcase 4063 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4064

Testcase 4064 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4065

Testcase 4065 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4066

Testcase 4066 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4067

Testcase 4067 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4068

Testcase 4068 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4069

Testcase 4069 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4070

Testcase 4070 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4071

Testcase 4071 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4072

Testcase 4072 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4073

Testcase 4073 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4074

Testcase 4074 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4075

Testcase 4075 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4076

Testcase 4076 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4077

Testcase 4077 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4078

Testcase 4078 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4079

Testcase 4079 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4080

Testcase 4080 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4081

Testcase 4081 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4082

Testcase 4082 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4083

Testcase 4083 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4084

Testcase 4084 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4085

Testcase 4085 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4086

Testcase 4086 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4087

Testcase 4087 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4088

Testcase 4088 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4089

Testcase 4089 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4090

Testcase 4090 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4091

Testcase 4091 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4092

Testcase 4092 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4093

Testcase 4093 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4094

Testcase 4094 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4095

Testcase 4095 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4096

Testcase 4096 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4097

Testcase 4097 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4098

Testcase 4098 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4099

Testcase 4099 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4100

Testcase 4100 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4101

Testcase 4101 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4102

Testcase 4102 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4103

Testcase 4103 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4104

Testcase 4104 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4105

Testcase 4105 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4106

Testcase 4106 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4107

Testcase 4107 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4108

Testcase 4108 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4109

Testcase 4109 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4110

Testcase 4110 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4111

Testcase 4111 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4112

Testcase 4112 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4113

Testcase 4113 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4114

Testcase 4114 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4115

Testcase 4115 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4116

Testcase 4116 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4117

Testcase 4117 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4118

Testcase 4118 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4119

Testcase 4119 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4120

Testcase 4120 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4121

Testcase 4121 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4122

Testcase 4122 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4123

Testcase 4123 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4124

Testcase 4124 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4125

Testcase 4125 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4126

Testcase 4126 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4127

Testcase 4127 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4128

Testcase 4128 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4129

Testcase 4129 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4130

Testcase 4130 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4131

Testcase 4131 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4132

Testcase 4132 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4133

Testcase 4133 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4134

Testcase 4134 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4135

Testcase 4135 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4136

Testcase 4136 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4137

Testcase 4137 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4138

Testcase 4138 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4139

Testcase 4139 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4140

Testcase 4140 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4141

Testcase 4141 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4142

Testcase 4142 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4143

Testcase 4143 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4144

Testcase 4144 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4145

Testcase 4145 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4146

Testcase 4146 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4147

Testcase 4147 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4148

Testcase 4148 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4149

Testcase 4149 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4150

Testcase 4150 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4151

Testcase 4151 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4152

Testcase 4152 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4153

Testcase 4153 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4154

Testcase 4154 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4155

Testcase 4155 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4156

Testcase 4156 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4157

Testcase 4157 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4158

Testcase 4158 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4159

Testcase 4159 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4160

Testcase 4160 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4161

Testcase 4161 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4162

Testcase 4162 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4163

Testcase 4163 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4164

Testcase 4164 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4165

Testcase 4165 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4166

Testcase 4166 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4167

Testcase 4167 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4168

Testcase 4168 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4169

Testcase 4169 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4170

Testcase 4170 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4171

Testcase 4171 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4172

Testcase 4172 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4173

Testcase 4173 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4174

Testcase 4174 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4175

Testcase 4175 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4176

Testcase 4176 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4177

Testcase 4177 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4178

Testcase 4178 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4179

Testcase 4179 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4180

Testcase 4180 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4181

Testcase 4181 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4182

Testcase 4182 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4183

Testcase 4183 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4184

Testcase 4184 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4185

Testcase 4185 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4186

Testcase 4186 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4187

Testcase 4187 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4188

Testcase 4188 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4189

Testcase 4189 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4190

Testcase 4190 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4191

Testcase 4191 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4192

Testcase 4192 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4193

Testcase 4193 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4194

Testcase 4194 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4195

Testcase 4195 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4196

Testcase 4196 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4197

Testcase 4197 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4198

Testcase 4198 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4199

Testcase 4199 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4200

Testcase 4200 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4201

Testcase 4201 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4202

Testcase 4202 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4203

Testcase 4203 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4204

Testcase 4204 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4205

Testcase 4205 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4206

Testcase 4206 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4207

Testcase 4207 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4208

Testcase 4208 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4209

Testcase 4209 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4210

Testcase 4210 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4211

Testcase 4211 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4212

Testcase 4212 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4213

Testcase 4213 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4214

Testcase 4214 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4215

Testcase 4215 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4216

Testcase 4216 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4217

Testcase 4217 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4218

Testcase 4218 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4219

Testcase 4219 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4220

Testcase 4220 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4221

Testcase 4221 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4222

Testcase 4222 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4223

Testcase 4223 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4224

Testcase 4224 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4225

Testcase 4225 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4226

Testcase 4226 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4227

Testcase 4227 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4228

Testcase 4228 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4229

Testcase 4229 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4230

Testcase 4230 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4231

Testcase 4231 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4232

Testcase 4232 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4233

Testcase 4233 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4234

Testcase 4234 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4235

Testcase 4235 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4236

Testcase 4236 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4237

Testcase 4237 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4238

Testcase 4238 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4239

Testcase 4239 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4240

Testcase 4240 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4241

Testcase 4241 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4242

Testcase 4242 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4243

Testcase 4243 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4244

Testcase 4244 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4245

Testcase 4245 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4246

Testcase 4246 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4247

Testcase 4247 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4248

Testcase 4248 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4249

Testcase 4249 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4250

Testcase 4250 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4251

Testcase 4251 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4252

Testcase 4252 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4253

Testcase 4253 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4254

Testcase 4254 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4255

Testcase 4255 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4256

Testcase 4256 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4257

Testcase 4257 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4258

Testcase 4258 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4259

Testcase 4259 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4260

Testcase 4260 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4261

Testcase 4261 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4262

Testcase 4262 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4263

Testcase 4263 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4264

Testcase 4264 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4265

Testcase 4265 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4266

Testcase 4266 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4267

Testcase 4267 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4268

Testcase 4268 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4269

Testcase 4269 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4270

Testcase 4270 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4271

Testcase 4271 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4272

Testcase 4272 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4273

Testcase 4273 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4274

Testcase 4274 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4275

Testcase 4275 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4276

Testcase 4276 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4277

Testcase 4277 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4278

Testcase 4278 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4279

Testcase 4279 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4280

Testcase 4280 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4281

Testcase 4281 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4282

Testcase 4282 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4283

Testcase 4283 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4284

Testcase 4284 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4285

Testcase 4285 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4286

Testcase 4286 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4287

Testcase 4287 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4288

Testcase 4288 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4289

Testcase 4289 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4290

Testcase 4290 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4291

Testcase 4291 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4292

Testcase 4292 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4293

Testcase 4293 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4294

Testcase 4294 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4295

Testcase 4295 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4296

Testcase 4296 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4297

Testcase 4297 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4298

Testcase 4298 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4299

Testcase 4299 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4300

Testcase 4300 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	DNS name validation failed
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4301

Testcase 4301 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4302

Testcase 4302 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4303

Testcase 4303 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4304

Testcase 4304 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4305

Testcase 4305 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4306

Testcase 4306 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4307

Testcase 4307 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4308

Testcase 4308 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4309

Testcase 4309 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4310

Testcase 4310 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4311

Testcase 4311 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4312

Testcase 4312 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4313

Testcase 4313 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4314

Testcase 4314 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4315

Testcase 4315 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4316

Testcase 4316 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4317

Testcase 4317 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4318

Testcase 4318 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4319

Testcase 4319 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4320

Testcase 4320 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4321

Testcase 4321 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4322

Testcase 4322 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4323

Testcase 4323 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4324

Testcase 4324 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4325

Testcase 4325 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4326

Testcase 4326 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4327

Testcase 4327 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4328

Testcase 4328 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4329

Testcase 4329 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4330

Testcase 4330 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4331

Testcase 4331 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4332

Testcase 4332 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4333

Testcase 4333 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4334

Testcase 4334 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4335

Testcase 4335 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4336

Testcase 4336 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4337

Testcase 4337 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4338

Testcase 4338 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4339

Testcase 4339 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4340

Testcase 4340 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4341

Testcase 4341 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4342

Testcase 4342 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4343

Testcase 4343 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4344

Testcase 4344 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4345

Testcase 4345 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4346

Testcase 4346 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4347

Testcase 4347 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4348

Testcase 4348 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4349

Testcase 4349 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4350

Testcase 4350 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4351

Testcase 4351 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4352

Testcase 4352 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4353

Testcase 4353 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4354

Testcase 4354 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4355

Testcase 4355 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4356

Testcase 4356 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4357

Testcase 4357 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4358

Testcase 4358 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4359

Testcase 4359 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4360

Testcase 4360 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4361

Testcase 4361 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4362

Testcase 4362 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4363

Testcase 4363 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4364

Testcase 4364 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4365

Testcase 4365 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4366

Testcase 4366 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4367

Testcase 4367 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4368

Testcase 4368 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4369

Testcase 4369 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4370

Testcase 4370 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4371

Testcase 4371 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4372

Testcase 4372 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4373

Testcase 4373 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4374

Testcase 4374 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4375

Testcase 4375 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4376

Testcase 4376 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4377

Testcase 4377 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4378

Testcase 4378 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4379

Testcase 4379 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4380

Testcase 4380 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4381

Testcase 4381 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4382

Testcase 4382 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4383

Testcase 4383 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4384

Testcase 4384 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4385

Testcase 4385 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4386

Testcase 4386 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4387

Testcase 4387 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4388

Testcase 4388 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4389

Testcase 4389 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4390

Testcase 4390 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4391

Testcase 4391 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4392

Testcase 4392 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4393

Testcase 4393 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4394

Testcase 4394 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4395

Testcase 4395 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4396

Testcase 4396 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4397

Testcase 4397 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4398

Testcase 4398 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4399

Testcase 4399 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4400

Testcase 4400 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4401

Testcase 4401 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4402

Testcase 4402 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4403

Testcase 4403 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4404

Testcase 4404 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4405

Testcase 4405 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4406

Testcase 4406 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4407

Testcase 4407 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4408

Testcase 4408 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4409

Testcase 4409 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4410

Testcase 4410 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4411

Testcase 4411 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4412

Testcase 4412 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4413

Testcase 4413 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4414

Testcase 4414 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4415

Testcase 4415 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4416

Testcase 4416 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4417

Testcase 4417 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4418

Testcase 4418 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4419

Testcase 4419 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4420

Testcase 4420 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4421

Testcase 4421 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4422

Testcase 4422 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4423

Testcase 4423 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4424

Testcase 4424 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4425

Testcase 4425 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4426

Testcase 4426 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4427

Testcase 4427 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4428

Testcase 4428 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4429

Testcase 4429 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4430

Testcase 4430 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4431

Testcase 4431 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4432

Testcase 4432 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4433

Testcase 4433 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4434

Testcase 4434 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4435

Testcase 4435 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4436

Testcase 4436 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4437

Testcase 4437 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4438

Testcase 4438 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4439

Testcase 4439 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4440

Testcase 4440 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4441

Testcase 4441 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4442

Testcase 4442 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4443

Testcase 4443 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4444

Testcase 4444 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4445

Testcase 4445 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4446

Testcase 4446 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4447

Testcase 4447 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4448

Testcase 4448 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4449

Testcase 4449 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4450

Testcase 4450 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4451

Testcase 4451 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4452

Testcase 4452 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4453

Testcase 4453 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4454

Testcase 4454 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4455

Testcase 4455 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4456

Testcase 4456 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4457

Testcase 4457 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4458

Testcase 4458 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4459

Testcase 4459 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4460

Testcase 4460 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4461

Testcase 4461 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4462

Testcase 4462 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4463

Testcase 4463 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4464

Testcase 4464 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4465

Testcase 4465 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4466

Testcase 4466 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4467

Testcase 4467 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4468

Testcase 4468 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4469

Testcase 4469 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4470

Testcase 4470 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4471

Testcase 4471 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4472

Testcase 4472 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4473

Testcase 4473 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4474

Testcase 4474 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4475

Testcase 4475 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4476

Testcase 4476 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4477

Testcase 4477 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4478

Testcase 4478 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4479

Testcase 4479 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4480

Testcase 4480 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4481

Testcase 4481 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4482

Testcase 4482 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4483

Testcase 4483 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4484

Testcase 4484 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4485

Testcase 4485 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4486

Testcase 4486 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4487

Testcase 4487 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4488

Testcase 4488 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4489

Testcase 4489 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4490

Testcase 4490 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4491

Testcase 4491 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4492

Testcase 4492 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4493

Testcase 4493 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4494

Testcase 4494 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4495

Testcase 4495 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4496

Testcase 4496 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4497

Testcase 4497 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4498

Testcase 4498 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4499

Testcase 4499 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4500

Testcase 4500 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4501

Testcase 4501 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4502

Testcase 4502 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4503

Testcase 4503 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4504

Testcase 4504 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4505

Testcase 4505 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4506

Testcase 4506 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4507

Testcase 4507 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4508

Testcase 4508 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4509

Testcase 4509 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4510

Testcase 4510 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4511

Testcase 4511 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4512

Testcase 4512 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4513

Testcase 4513 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4514

Testcase 4514 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4515

Testcase 4515 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4516

Testcase 4516 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4517

Testcase 4517 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4518

Testcase 4518 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4519

Testcase 4519 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4520

Testcase 4520 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4521

Testcase 4521 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4522

Testcase 4522 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4523

Testcase 4523 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4524

Testcase 4524 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4525

Testcase 4525 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4526

Testcase 4526 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4527

Testcase 4527 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4528

Testcase 4528 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4529

Testcase 4529 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4530

Testcase 4530 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4531

Testcase 4531 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4532

Testcase 4532 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4533

Testcase 4533 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4534

Testcase 4534 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4535

Testcase 4535 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4536

Testcase 4536 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4537

Testcase 4537 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4538

Testcase 4538 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4539

Testcase 4539 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4540

Testcase 4540 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4541

Testcase 4541 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4542

Testcase 4542 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4543

Testcase 4543 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4544

Testcase 4544 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4545

Testcase 4545 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4546

Testcase 4546 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4547

Testcase 4547 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4548

Testcase 4548 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4549

Testcase 4549 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4550

Testcase 4550 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4551

Testcase 4551 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4552

Testcase 4552 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4553

Testcase 4553 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4554

Testcase 4554 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4555

Testcase 4555 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4556

Testcase 4556 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4557

Testcase 4557 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4558

Testcase 4558 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4559

Testcase 4559 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4560

Testcase 4560 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4561

Testcase 4561 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4562

Testcase 4562 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4563

Testcase 4563 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4564

Testcase 4564 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4565

Testcase 4565 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4566

Testcase 4566 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4567

Testcase 4567 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4568

Testcase 4568 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4569

Testcase 4569 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4570

Testcase 4570 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4571

Testcase 4571 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4572

Testcase 4572 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4573

Testcase 4573 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4574

Testcase 4574 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4575

Testcase 4575 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4576

Testcase 4576 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4577

Testcase 4577 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4578

Testcase 4578 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4579

Testcase 4579 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4580

Testcase 4580 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4581

Testcase 4581 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4582

Testcase 4582 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4583

Testcase 4583 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4584

Testcase 4584 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4585

Testcase 4585 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4586

Testcase 4586 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4587

Testcase 4587 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4588

Testcase 4588 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4589

Testcase 4589 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4590

Testcase 4590 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4591

Testcase 4591 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4592

Testcase 4592 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4593

Testcase 4593 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4594

Testcase 4594 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4595

Testcase 4595 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4596

Testcase 4596 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4597

Testcase 4597 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4598

Testcase 4598 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4599

Testcase 4599 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4600

Testcase 4600 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4601

Testcase 4601 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4602

Testcase 4602 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4603

Testcase 4603 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4604

Testcase 4604 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4605

Testcase 4605 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4606

Testcase 4606 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4607

Testcase 4607 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4608

Testcase 4608 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4609

Testcase 4609 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4610

Testcase 4610 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4611

Testcase 4611 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4612

Testcase 4612 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4613

Testcase 4613 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4614

Testcase 4614 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4615

Testcase 4615 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4616

Testcase 4616 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4617

Testcase 4617 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4618

Testcase 4618 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4619

Testcase 4619 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4620

Testcase 4620 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4621

Testcase 4621 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4622

Testcase 4622 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4623

Testcase 4623 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4624

Testcase 4624 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4625

Testcase 4625 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4626

Testcase 4626 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4627

Testcase 4627 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4628

Testcase 4628 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4629

Testcase 4629 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4630

Testcase 4630 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4631

Testcase 4631 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4632

Testcase 4632 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4633

Testcase 4633 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4634

Testcase 4634 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4635

Testcase 4635 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4636

Testcase 4636 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4637

Testcase 4637 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4638

Testcase 4638 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4639

Testcase 4639 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4640

Testcase 4640 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4641

Testcase 4641 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4642

Testcase 4642 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4643

Testcase 4643 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4644

Testcase 4644 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4645

Testcase 4645 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4646

Testcase 4646 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4647

Testcase 4647 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4648

Testcase 4648 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4649

Testcase 4649 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4650

Testcase 4650 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4651

Testcase 4651 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4652

Testcase 4652 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4653

Testcase 4653 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4654

Testcase 4654 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4655

Testcase 4655 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4656

Testcase 4656 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4657

Testcase 4657 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4658

Testcase 4658 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4659

Testcase 4659 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4660

Testcase 4660 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4661

Testcase 4661 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4662

Testcase 4662 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4663

Testcase 4663 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4664

Testcase 4664 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4665

Testcase 4665 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4666

Testcase 4666 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4667

Testcase 4667 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4668

Testcase 4668 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4669

Testcase 4669 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4670

Testcase 4670 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4671

Testcase 4671 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4672

Testcase 4672 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4673

Testcase 4673 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4674

Testcase 4674 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4675

Testcase 4675 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4676

Testcase 4676 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4677

Testcase 4677 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4678

Testcase 4678 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4679

Testcase 4679 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4680

Testcase 4680 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4681

Testcase 4681 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4682

Testcase 4682 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4683

Testcase 4683 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4684

Testcase 4684 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4685

Testcase 4685 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4686

Testcase 4686 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4687

Testcase 4687 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4688

Testcase 4688 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4689

Testcase 4689 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4690

Testcase 4690 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4691

Testcase 4691 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4692

Testcase 4692 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4693

Testcase 4693 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4694

Testcase 4694 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4695

Testcase 4695 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4696

Testcase 4696 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4697

Testcase 4697 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4698

Testcase 4698 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4699

Testcase 4699 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4700

Testcase 4700 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4701

Testcase 4701 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4702

Testcase 4702 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4703

Testcase 4703 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4704

Testcase 4704 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4705

Testcase 4705 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4706

Testcase 4706 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4707

Testcase 4707 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4708

Testcase 4708 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4709

Testcase 4709 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4710

Testcase 4710 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4711

Testcase 4711 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4712

Testcase 4712 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4713

Testcase 4713 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4714

Testcase 4714 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4715

Testcase 4715 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4716

Testcase 4716 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4717

Testcase 4717 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4718

Testcase 4718 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4719

Testcase 4719 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4720

Testcase 4720 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4721

Testcase 4721 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4722

Testcase 4722 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4723

Testcase 4723 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4724

Testcase 4724 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4725

Testcase 4725 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4726

Testcase 4726 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4727

Testcase 4727 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4728

Testcase 4728 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4729

Testcase 4729 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4730

Testcase 4730 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4731

Testcase 4731 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4732

Testcase 4732 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4733

Testcase 4733 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4734

Testcase 4734 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4735

Testcase 4735 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4736

Testcase 4736 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4737

Testcase 4737 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4738

Testcase 4738 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4739

Testcase 4739 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4740

Testcase 4740 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4741

Testcase 4741 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4742

Testcase 4742 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4743

Testcase 4743 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4744

Testcase 4744 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4745

Testcase 4745 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4746

Testcase 4746 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4747

Testcase 4747 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4748

Testcase 4748 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4749

Testcase 4749 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4750

Testcase 4750 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4751

Testcase 4751 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4752

Testcase 4752 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4753

Testcase 4753 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4754

Testcase 4754 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4755

Testcase 4755 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4756

Testcase 4756 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4757

Testcase 4757 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4758

Testcase 4758 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4759

Testcase 4759 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4760

Testcase 4760 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4761

Testcase 4761 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4762

Testcase 4762 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4763

Testcase 4763 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4764

Testcase 4764 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4765

Testcase 4765 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4766

Testcase 4766 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4767

Testcase 4767 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4768

Testcase 4768 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4769

Testcase 4769 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4770

Testcase 4770 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4771

Testcase 4771 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4772

Testcase 4772 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4773

Testcase 4773 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4774

Testcase 4774 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4775

Testcase 4775 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4776

Testcase 4776 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4777

Testcase 4777 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4778

Testcase 4778 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4779

Testcase 4779 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4780

Testcase 4780 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4781

Testcase 4781 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4782

Testcase 4782 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4783

Testcase 4783 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4784

Testcase 4784 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4785

Testcase 4785 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4786

Testcase 4786 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4787

Testcase 4787 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4788

Testcase 4788 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4789

Testcase 4789 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4790

Testcase 4790 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4791

Testcase 4791 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4792

Testcase 4792 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4793

Testcase 4793 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4794

Testcase 4794 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4795

Testcase 4795 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4796

Testcase 4796 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4797

Testcase 4797 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4798

Testcase 4798 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4799

Testcase 4799 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4800

Testcase 4800 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4801

Testcase 4801 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4802

Testcase 4802 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4803

Testcase 4803 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4804

Testcase 4804 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4805

Testcase 4805 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4806

Testcase 4806 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4807

Testcase 4807 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4808

Testcase 4808 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4809

Testcase 4809 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4810

Testcase 4810 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4811

Testcase 4811 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4812

Testcase 4812 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4813

Testcase 4813 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4814

Testcase 4814 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4815

Testcase 4815 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4816

Testcase 4816 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4817

Testcase 4817 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4818

Testcase 4818 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4819

Testcase 4819 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4820

Testcase 4820 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4821

Testcase 4821 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4822

Testcase 4822 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4823

Testcase 4823 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4824

Testcase 4824 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4825

Testcase 4825 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4826

Testcase 4826 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4827

Testcase 4827 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4828

Testcase 4828 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4829

Testcase 4829 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4830

Testcase 4830 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4831

Testcase 4831 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4832

Testcase 4832 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4833

Testcase 4833 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4834

Testcase 4834 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4835

Testcase 4835 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4836

Testcase 4836 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4837

Testcase 4837 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4838

Testcase 4838 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4839

Testcase 4839 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4840

Testcase 4840 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4841

Testcase 4841 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4842

Testcase 4842 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4843

Testcase 4843 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4844

Testcase 4844 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4845

Testcase 4845 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4846

Testcase 4846 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4847

Testcase 4847 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4848

Testcase 4848 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4849

Testcase 4849 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4850

Testcase 4850 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4851

Testcase 4851 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4852

Testcase 4852 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4853

Testcase 4853 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4854

Testcase 4854 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4855

Testcase 4855 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4856

Testcase 4856 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4857

Testcase 4857 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4858

Testcase 4858 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4859

Testcase 4859 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4860

Testcase 4860 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4861

Testcase 4861 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4862

Testcase 4862 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4863

Testcase 4863 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4864

Testcase 4864 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4865

Testcase 4865 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4866

Testcase 4866 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4867

Testcase 4867 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4868

Testcase 4868 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4869

Testcase 4869 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4870

Testcase 4870 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4871

Testcase 4871 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4872

Testcase 4872 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4873

Testcase 4873 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4874

Testcase 4874 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4875

Testcase 4875 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4876

Testcase 4876 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4877

Testcase 4877 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4878

Testcase 4878 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4879

Testcase 4879 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4880

Testcase 4880 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4881

Testcase 4881 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4882

Testcase 4882 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4883

Testcase 4883 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4884

Testcase 4884 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4885

Testcase 4885 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4886

Testcase 4886 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4887

Testcase 4887 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4888

Testcase 4888 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4889

Testcase 4889 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4890

Testcase 4890 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4891

Testcase 4891 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4892

Testcase 4892 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4893

Testcase 4893 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4894

Testcase 4894 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4895

Testcase 4895 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4896

Testcase 4896 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4897

Testcase 4897 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4898

Testcase 4898 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4899

Testcase 4899 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4900

Testcase 4900 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4901

Testcase 4901 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4902

Testcase 4902 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4903

Testcase 4903 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4904

Testcase 4904 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4905

Testcase 4905 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4906

Testcase 4906 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4907

Testcase 4907 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4908

Testcase 4908 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4909

Testcase 4909 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4910

Testcase 4910 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4911

Testcase 4911 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4912

Testcase 4912 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4913

Testcase 4913 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4914

Testcase 4914 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4915

Testcase 4915 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4916

Testcase 4916 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4917

Testcase 4917 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4918

Testcase 4918 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4919

Testcase 4919 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4920

Testcase 4920 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4921

Testcase 4921 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4922

Testcase 4922 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4923

Testcase 4923 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4924

Testcase 4924 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4925

Testcase 4925 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4926

Testcase 4926 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4927

Testcase 4927 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4928

Testcase 4928 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4929

Testcase 4929 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4930

Testcase 4930 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4931

Testcase 4931 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4932

Testcase 4932 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4933

Testcase 4933 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4934

Testcase 4934 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4935

Testcase 4935 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4936

Testcase 4936 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4937

Testcase 4937 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4938

Testcase 4938 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4939

Testcase 4939 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4940

Testcase 4940 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4941

Testcase 4941 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4942

Testcase 4942 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4943

Testcase 4943 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4944

Testcase 4944 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4945

Testcase 4945 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4946

Testcase 4946 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4947

Testcase 4947 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4948

Testcase 4948 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4949

Testcase 4949 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4950

Testcase 4950 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4951

Testcase 4951 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4952

Testcase 4952 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4953

Testcase 4953 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4954

Testcase 4954 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4955

Testcase 4955 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4956

Testcase 4956 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4957

Testcase 4957 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4958

Testcase 4958 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4959

Testcase 4959 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4960

Testcase 4960 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4961

Testcase 4961 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4962

Testcase 4962 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4963

Testcase 4963 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4964

Testcase 4964 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4965

Testcase 4965 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4966

Testcase 4966 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4967

Testcase 4967 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4968

Testcase 4968 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4969

Testcase 4969 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4970

Testcase 4970 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4971

Testcase 4971 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4972

Testcase 4972 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4973

Testcase 4973 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4974

Testcase 4974 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4975

Testcase 4975 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4976

Testcase 4976 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4977

Testcase 4977 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4978

Testcase 4978 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4979

Testcase 4979 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4980

Testcase 4980 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4981

Testcase 4981 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4982

Testcase 4982 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4983

Testcase 4983 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4984

Testcase 4984 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4985

Testcase 4985 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4986

Testcase 4986 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4987

Testcase 4987 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4988

Testcase 4988 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4989

Testcase 4989 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4990

Testcase 4990 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4991

Testcase 4991 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4992

Testcase 4992 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4993

Testcase 4993 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4994

Testcase 4994 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4995

Testcase 4995 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4996

Testcase 4996 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4997

Testcase 4997 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4998

Testcase 4998 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc4999

Testcase 4999 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5000

Testcase 5000 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5001

Testcase 5001 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5002

Testcase 5002 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5003

Testcase 5003 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5004

Testcase 5004 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5005

Testcase 5005 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5006

Testcase 5006 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5007

Testcase 5007 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5008

Testcase 5008 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5009

Testcase 5009 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5010

Testcase 5010 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5011

Testcase 5011 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5012

Testcase 5012 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5013

Testcase 5013 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5014

Testcase 5014 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5015

Testcase 5015 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5016

Testcase 5016 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5017

Testcase 5017 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5018

Testcase 5018 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5019

Testcase 5019 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5020

Testcase 5020 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5021

Testcase 5021 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5022

Testcase 5022 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5023

Testcase 5023 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5024

Testcase 5024 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5025

Testcase 5025 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5026

Testcase 5026 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5027

Testcase 5027 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5028

Testcase 5028 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5029

Testcase 5029 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5030

Testcase 5030 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5031

Testcase 5031 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5032

Testcase 5032 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5033

Testcase 5033 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5034

Testcase 5034 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5035

Testcase 5035 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5036

Testcase 5036 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5037

Testcase 5037 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5038

Testcase 5038 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5039

Testcase 5039 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5040

Testcase 5040 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5041

Testcase 5041 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5042

Testcase 5042 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5043

Testcase 5043 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5044

Testcase 5044 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5045

Testcase 5045 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5046

Testcase 5046 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5047

Testcase 5047 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5048

Testcase 5048 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5049

Testcase 5049 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5050

Testcase 5050 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5051

Testcase 5051 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5052

Testcase 5052 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5053

Testcase 5053 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5054

Testcase 5054 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5055

Testcase 5055 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5056

Testcase 5056 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5057

Testcase 5057 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5058

Testcase 5058 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5059

Testcase 5059 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5060

Testcase 5060 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5061

Testcase 5061 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5062

Testcase 5062 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5063

Testcase 5063 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5064

Testcase 5064 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5065

Testcase 5065 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5066

Testcase 5066 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5067

Testcase 5067 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5068

Testcase 5068 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5069

Testcase 5069 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5070

Testcase 5070 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5071

Testcase 5071 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5072

Testcase 5072 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5073

Testcase 5073 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5074

Testcase 5074 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5075

Testcase 5075 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5076

Testcase 5076 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5077

Testcase 5077 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5078

Testcase 5078 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5079

Testcase 5079 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5080

Testcase 5080 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5081

Testcase 5081 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5082

Testcase 5082 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5083

Testcase 5083 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5084

Testcase 5084 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5085

Testcase 5085 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5086

Testcase 5086 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5087

Testcase 5087 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5088

Testcase 5088 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5089

Testcase 5089 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5090

Testcase 5090 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5091

Testcase 5091 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5092

Testcase 5092 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5093

Testcase 5093 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5094

Testcase 5094 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5095

Testcase 5095 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5096

Testcase 5096 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5097

Testcase 5097 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5098

Testcase 5098 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5099

Testcase 5099 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5100

Testcase 5100 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5101

Testcase 5101 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5102

Testcase 5102 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5103

Testcase 5103 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5104

Testcase 5104 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5105

Testcase 5105 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5106

Testcase 5106 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5107

Testcase 5107 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5108

Testcase 5108 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5109

Testcase 5109 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5110

Testcase 5110 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5111

Testcase 5111 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5112

Testcase 5112 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5113

Testcase 5113 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5114

Testcase 5114 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5115

Testcase 5115 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5116

Testcase 5116 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5117

Testcase 5117 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5118

Testcase 5118 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5119

Testcase 5119 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5120

Testcase 5120 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5121

Testcase 5121 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5122

Testcase 5122 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5123

Testcase 5123 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5124

Testcase 5124 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5125

Testcase 5125 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5126

Testcase 5126 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5127

Testcase 5127 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5128

Testcase 5128 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5129

Testcase 5129 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5130

Testcase 5130 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5131

Testcase 5131 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5132

Testcase 5132 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5133

Testcase 5133 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5134

Testcase 5134 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5135

Testcase 5135 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5136

Testcase 5136 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5137

Testcase 5137 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5138

Testcase 5138 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5139

Testcase 5139 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5140

Testcase 5140 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5141

Testcase 5141 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5142

Testcase 5142 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5143

Testcase 5143 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5144

Testcase 5144 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5145

Testcase 5145 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5146

Testcase 5146 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5147

Testcase 5147 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5148

Testcase 5148 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5149

Testcase 5149 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5150

Testcase 5150 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5151

Testcase 5151 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5152

Testcase 5152 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5153

Testcase 5153 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5154

Testcase 5154 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5155

Testcase 5155 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5156

Testcase 5156 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5157

Testcase 5157 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5158

Testcase 5158 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5159

Testcase 5159 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5160

Testcase 5160 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5161

Testcase 5161 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5162

Testcase 5162 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5163

Testcase 5163 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5164

Testcase 5164 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5165

Testcase 5165 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5166

Testcase 5166 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5167

Testcase 5167 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5168

Testcase 5168 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5169

Testcase 5169 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5170

Testcase 5170 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5171

Testcase 5171 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5172

Testcase 5172 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5173

Testcase 5173 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5174

Testcase 5174 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5175

Testcase 5175 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5176

Testcase 5176 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5177

Testcase 5177 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5178

Testcase 5178 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5179

Testcase 5179 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5180

Testcase 5180 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5181

Testcase 5181 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5182

Testcase 5182 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5183

Testcase 5183 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5184

Testcase 5184 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5185

Testcase 5185 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5186

Testcase 5186 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5187

Testcase 5187 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5188

Testcase 5188 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5189

Testcase 5189 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5190

Testcase 5190 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5191

Testcase 5191 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5192

Testcase 5192 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5193

Testcase 5193 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5194

Testcase 5194 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
openssl-3.4.1	❌ (unexpected failure)	excluded subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	excluded subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5195

Testcase 5195 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5196

Testcase 5196 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
openssl-3.4.1	❌ (unexpected failure)	excluded subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	excluded subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5197

Testcase 5197 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5198

Testcase 5198 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5199

Testcase 5199 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5200

Testcase 5200 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5201

Testcase 5201 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5202

Testcase 5202 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5203

Testcase 5203 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
openssl-3.4.1	❌ (unexpected failure)	excluded subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	excluded subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5204

Testcase 5204 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5205

Testcase 5205 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
openssl-3.4.1	❌ (unexpected failure)	excluded subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	excluded subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5206

Testcase 5206 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5207

Testcase 5207 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5208

Testcase 5208 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5209

Testcase 5209 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5210

Testcase 5210 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5211

Testcase 5211 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5212

Testcase 5212 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5213

Testcase 5213 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5214

Testcase 5214 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5215

Testcase 5215 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5216

Testcase 5216 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5217

Testcase 5217 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5218

Testcase 5218 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5219

Testcase 5219 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5220

Testcase 5220 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5221

Testcase 5221 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
openssl-3.4.1	❌ (unexpected failure)	excluded subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	excluded subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5222

Testcase 5222 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5223

Testcase 5223 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
openssl-3.4.1	❌ (unexpected failure)	excluded subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	excluded subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5224

Testcase 5224 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5225

Testcase 5225 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5226

Testcase 5226 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5227

Testcase 5227 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5228

Testcase 5228 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5229

Testcase 5229 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5230

Testcase 5230 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
openssl-3.4.1	❌ (unexpected failure)	excluded subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	excluded subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5231

Testcase 5231 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5232

Testcase 5232 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
openssl-3.4.1	❌ (unexpected failure)	excluded subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	excluded subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5233

Testcase 5233 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5234

Testcase 5234 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5235

Testcase 5235 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5236

Testcase 5236 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5237

Testcase 5237 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5238

Testcase 5238 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5239

Testcase 5239 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5240

Testcase 5240 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5241

Testcase 5241 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5242

Testcase 5242 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5243

Testcase 5243 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5244

Testcase 5244 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5245

Testcase 5245 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5246

Testcase 5246 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5247

Testcase 5247 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5248

Testcase 5248 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5249

Testcase 5249 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5250

Testcase 5250 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5251

Testcase 5251 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5252

Testcase 5252 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5253

Testcase 5253 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5254

Testcase 5254 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5255

Testcase 5255 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5256

Testcase 5256 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5257

Testcase 5257 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5258

Testcase 5258 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5259

Testcase 5259 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5260

Testcase 5260 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5261

Testcase 5261 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5262

Testcase 5262 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5263

Testcase 5263 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5264

Testcase 5264 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5265

Testcase 5265 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5266

Testcase 5266 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5267

Testcase 5267 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5268

Testcase 5268 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5269

Testcase 5269 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5270

Testcase 5270 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5271

Testcase 5271 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5272

Testcase 5272 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5273

Testcase 5273 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5274

Testcase 5274 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5275

Testcase 5275 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5276

Testcase 5276 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5277

Testcase 5277 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5278

Testcase 5278 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5279

Testcase 5279 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5280

Testcase 5280 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5281

Testcase 5281 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5282

Testcase 5282 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5283

Testcase 5283 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5284

Testcase 5284 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5285

Testcase 5285 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5286

Testcase 5286 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5287

Testcase 5287 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5288

Testcase 5288 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5289

Testcase 5289 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5290

Testcase 5290 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5291

Testcase 5291 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5292

Testcase 5292 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5293

Testcase 5293 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5294

Testcase 5294 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5295

Testcase 5295 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5296

Testcase 5296 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5297

Testcase 5297 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5298

Testcase 5298 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5299

Testcase 5299 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5300

Testcase 5300 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5301

Testcase 5301 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5302

Testcase 5302 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5303

Testcase 5303 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5304

Testcase 5304 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5305

Testcase 5305 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5306

Testcase 5306 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5307

Testcase 5307 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5308

Testcase 5308 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5309

Testcase 5309 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5310

Testcase 5310 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5311

Testcase 5311 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5312

Testcase 5312 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5313

Testcase 5313 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5314

Testcase 5314 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5315

Testcase 5315 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5316

Testcase 5316 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5317

Testcase 5317 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5318

Testcase 5318 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5319

Testcase 5319 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5320

Testcase 5320 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5321

Testcase 5321 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5322

Testcase 5322 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5323

Testcase 5323 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5324

Testcase 5324 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5325

Testcase 5325 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5326

Testcase 5326 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5327

Testcase 5327 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5328

Testcase 5328 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5329

Testcase 5329 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5330

Testcase 5330 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5331

Testcase 5331 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5332

Testcase 5332 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5333

Testcase 5333 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5334

Testcase 5334 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5335

Testcase 5335 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5336

Testcase 5336 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5337

Testcase 5337 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5338

Testcase 5338 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5339

Testcase 5339 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5340

Testcase 5340 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5341

Testcase 5341 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5342

Testcase 5342 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5343

Testcase 5343 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5344

Testcase 5344 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5345

Testcase 5345 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5346

Testcase 5346 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5347

Testcase 5347 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5348

Testcase 5348 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5349

Testcase 5349 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5350

Testcase 5350 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5351

Testcase 5351 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5352

Testcase 5352 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5353

Testcase 5353 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5354

Testcase 5354 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5355

Testcase 5355 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5356

Testcase 5356 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5357

Testcase 5357 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5358

Testcase 5358 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5359

Testcase 5359 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5360

Testcase 5360 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5361

Testcase 5361 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5362

Testcase 5362 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5363

Testcase 5363 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5364

Testcase 5364 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5365

Testcase 5365 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5366

Testcase 5366 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5367

Testcase 5367 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5368

Testcase 5368 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5369

Testcase 5369 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5370

Testcase 5370 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5371

Testcase 5371 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5372

Testcase 5372 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5373

Testcase 5373 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5374

Testcase 5374 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5375

Testcase 5375 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5376

Testcase 5376 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5377

Testcase 5377 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5378

Testcase 5378 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5379

Testcase 5379 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5380

Testcase 5380 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5381

Testcase 5381 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5382

Testcase 5382 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5383

Testcase 5383 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5384

Testcase 5384 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5385

Testcase 5385 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5386

Testcase 5386 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5387

Testcase 5387 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5388

Testcase 5388 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5389

Testcase 5389 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5390

Testcase 5390 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5391

Testcase 5391 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5392

Testcase 5392 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5393

Testcase 5393 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5394

Testcase 5394 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5395

Testcase 5395 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5396

Testcase 5396 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5397

Testcase 5397 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5398

Testcase 5398 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5399

Testcase 5399 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5400

Testcase 5400 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5401

Testcase 5401 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5402

Testcase 5402 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5403

Testcase 5403 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5404

Testcase 5404 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5405

Testcase 5405 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5406

Testcase 5406 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5407

Testcase 5407 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5408

Testcase 5408 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5409

Testcase 5409 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5410

Testcase 5410 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5411

Testcase 5411 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5412

Testcase 5412 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5413

Testcase 5413 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5414

Testcase 5414 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5415

Testcase 5415 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5416

Testcase 5416 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5417

Testcase 5417 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5418

Testcase 5418 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5419

Testcase 5419 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5420

Testcase 5420 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5421

Testcase 5421 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5422

Testcase 5422 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5423

Testcase 5423 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5424

Testcase 5424 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5425

Testcase 5425 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5426

Testcase 5426 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5427

Testcase 5427 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5428

Testcase 5428 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5429

Testcase 5429 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5430

Testcase 5430 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5431

Testcase 5431 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5432

Testcase 5432 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5433

Testcase 5433 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5434

Testcase 5434 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5435

Testcase 5435 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5436

Testcase 5436 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5437

Testcase 5437 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5438

Testcase 5438 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5439

Testcase 5439 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5440

Testcase 5440 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5441

Testcase 5441 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5442

Testcase 5442 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5443

Testcase 5443 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5444

Testcase 5444 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5445

Testcase 5445 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5446

Testcase 5446 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5447

Testcase 5447 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5448

Testcase 5448 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5449

Testcase 5449 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5450

Testcase 5450 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5451

Testcase 5451 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5452

Testcase 5452 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5453

Testcase 5453 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5454

Testcase 5454 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5455

Testcase 5455 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5456

Testcase 5456 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5457

Testcase 5457 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5458

Testcase 5458 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5459

Testcase 5459 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5460

Testcase 5460 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5461

Testcase 5461 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5462

Testcase 5462 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5463

Testcase 5463 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5464

Testcase 5464 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5465

Testcase 5465 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5466

Testcase 5466 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5467

Testcase 5467 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5468

Testcase 5468 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5469

Testcase 5469 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5470

Testcase 5470 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5471

Testcase 5471 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5472

Testcase 5472 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5473

Testcase 5473 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5474

Testcase 5474 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5475

Testcase 5475 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5476

Testcase 5476 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5477

Testcase 5477 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5478

Testcase 5478 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5479

Testcase 5479 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5480

Testcase 5480 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5481

Testcase 5481 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5482

Testcase 5482 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5483

Testcase 5483 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5484

Testcase 5484 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5485

Testcase 5485 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5486

Testcase 5486 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5487

Testcase 5487 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5488

Testcase 5488 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5489

Testcase 5489 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5490

Testcase 5490 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5491

Testcase 5491 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5492

Testcase 5492 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5493

Testcase 5493 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5494

Testcase 5494 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5495

Testcase 5495 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5496

Testcase 5496 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5497

Testcase 5497 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5498

Testcase 5498 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5499

Testcase 5499 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5500

Testcase 5500 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5501

Testcase 5501 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5502

Testcase 5502 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5503

Testcase 5503 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5504

Testcase 5504 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5505

Testcase 5505 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5506

Testcase 5506 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5507

Testcase 5507 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5508

Testcase 5508 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5509

Testcase 5509 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5510

Testcase 5510 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5511

Testcase 5511 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5512

Testcase 5512 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5513

Testcase 5513 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5514

Testcase 5514 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5515

Testcase 5515 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5516

Testcase 5516 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5517

Testcase 5517 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5518

Testcase 5518 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5519

Testcase 5519 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5520

Testcase 5520 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5521

Testcase 5521 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5522

Testcase 5522 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5523

Testcase 5523 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5524

Testcase 5524 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5525

Testcase 5525 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5526

Testcase 5526 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5527

Testcase 5527 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5528

Testcase 5528 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5529

Testcase 5529 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5530

Testcase 5530 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5531

Testcase 5531 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5532

Testcase 5532 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5533

Testcase 5533 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5534

Testcase 5534 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5535

Testcase 5535 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5536

Testcase 5536 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5537

Testcase 5537 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5538

Testcase 5538 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5539

Testcase 5539 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5540

Testcase 5540 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5541

Testcase 5541 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5542

Testcase 5542 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5543

Testcase 5543 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5544

Testcase 5544 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5545

Testcase 5545 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5546

Testcase 5546 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5547

Testcase 5547 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5548

Testcase 5548 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5549

Testcase 5549 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5550

Testcase 5550 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5551

Testcase 5551 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5552

Testcase 5552 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5553

Testcase 5553 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5554

Testcase 5554 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5555

Testcase 5555 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5556

Testcase 5556 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5557

Testcase 5557 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5558

Testcase 5558 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5559

Testcase 5559 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5560

Testcase 5560 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5561

Testcase 5561 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5562

Testcase 5562 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5563

Testcase 5563 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5564

Testcase 5564 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5565

Testcase 5565 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5566

Testcase 5566 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5567

Testcase 5567 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5568

Testcase 5568 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5569

Testcase 5569 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5570

Testcase 5570 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5571

Testcase 5571 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5572

Testcase 5572 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5573

Testcase 5573 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5574

Testcase 5574 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5575

Testcase 5575 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5576

Testcase 5576 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5577

Testcase 5577 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5578

Testcase 5578 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5579

Testcase 5579 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5580

Testcase 5580 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5581

Testcase 5581 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5582

Testcase 5582 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5583

Testcase 5583 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5584

Testcase 5584 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5585

Testcase 5585 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5586

Testcase 5586 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5587

Testcase 5587 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5588

Testcase 5588 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5589

Testcase 5589 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5590

Testcase 5590 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5591

Testcase 5591 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5592

Testcase 5592 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5593

Testcase 5593 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5594

Testcase 5594 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5595

Testcase 5595 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5596

Testcase 5596 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5597

Testcase 5597 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5598

Testcase 5598 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5599

Testcase 5599 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5600

Testcase 5600 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5601

Testcase 5601 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5602

Testcase 5602 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5603

Testcase 5603 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5604

Testcase 5604 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5605

Testcase 5605 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5606

Testcase 5606 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5607

Testcase 5607 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5608

Testcase 5608 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5609

Testcase 5609 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5610

Testcase 5610 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5611

Testcase 5611 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5612

Testcase 5612 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5613

Testcase 5613 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5614

Testcase 5614 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5615

Testcase 5615 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5616

Testcase 5616 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5617

Testcase 5617 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5618

Testcase 5618 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5619

Testcase 5619 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5620

Testcase 5620 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5621

Testcase 5621 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5622

Testcase 5622 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5623

Testcase 5623 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5624

Testcase 5624 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5625

Testcase 5625 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5626

Testcase 5626 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5627

Testcase 5627 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5628

Testcase 5628 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5629

Testcase 5629 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5630

Testcase 5630 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5631

Testcase 5631 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5632

Testcase 5632 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5633

Testcase 5633 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5634

Testcase 5634 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5635

Testcase 5635 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5636

Testcase 5636 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5637

Testcase 5637 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5638

Testcase 5638 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5639

Testcase 5639 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5640

Testcase 5640 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5641

Testcase 5641 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5642

Testcase 5642 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5643

Testcase 5643 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5644

Testcase 5644 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5645

Testcase 5645 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5646

Testcase 5646 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5647

Testcase 5647 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5648

Testcase 5648 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5649

Testcase 5649 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5650

Testcase 5650 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5651

Testcase 5651 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5652

Testcase 5652 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5653

Testcase 5653 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5654

Testcase 5654 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5655

Testcase 5655 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5656

Testcase 5656 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5657

Testcase 5657 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5658

Testcase 5658 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5659

Testcase 5659 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5660

Testcase 5660 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5661

Testcase 5661 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5662

Testcase 5662 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5663

Testcase 5663 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5664

Testcase 5664 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5665

Testcase 5665 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5666

Testcase 5666 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5667

Testcase 5667 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5668

Testcase 5668 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5669

Testcase 5669 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5670

Testcase 5670 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5671

Testcase 5671 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5672

Testcase 5672 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5673

Testcase 5673 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5674

Testcase 5674 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5675

Testcase 5675 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5676

Testcase 5676 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5677

Testcase 5677 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5678

Testcase 5678 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5679

Testcase 5679 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5680

Testcase 5680 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5681

Testcase 5681 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5682

Testcase 5682 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5683

Testcase 5683 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5684

Testcase 5684 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5685

Testcase 5685 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5686

Testcase 5686 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5687

Testcase 5687 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5688

Testcase 5688 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5689

Testcase 5689 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5690

Testcase 5690 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5691

Testcase 5691 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5692

Testcase 5692 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5693

Testcase 5693 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5694

Testcase 5694 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5695

Testcase 5695 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5696

Testcase 5696 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5697

Testcase 5697 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5698

Testcase 5698 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5699

Testcase 5699 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5700

Testcase 5700 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5701

Testcase 5701 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5702

Testcase 5702 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5703

Testcase 5703 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5704

Testcase 5704 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5705

Testcase 5705 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5706

Testcase 5706 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5707

Testcase 5707 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5708

Testcase 5708 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5709

Testcase 5709 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5710

Testcase 5710 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5711

Testcase 5711 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5712

Testcase 5712 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5713

Testcase 5713 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5714

Testcase 5714 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5715

Testcase 5715 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5716

Testcase 5716 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5717

Testcase 5717 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5718

Testcase 5718 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5719

Testcase 5719 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5720

Testcase 5720 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5721

Testcase 5721 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5722

Testcase 5722 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5723

Testcase 5723 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5724

Testcase 5724 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5725

Testcase 5725 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5726

Testcase 5726 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5727

Testcase 5727 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5728

Testcase 5728 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5729

Testcase 5729 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5730

Testcase 5730 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5731

Testcase 5731 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5732

Testcase 5732 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5733

Testcase 5733 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5734

Testcase 5734 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5735

Testcase 5735 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5736

Testcase 5736 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5737

Testcase 5737 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5738

Testcase 5738 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5739

Testcase 5739 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5740

Testcase 5740 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5741

Testcase 5741 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5742

Testcase 5742 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5743

Testcase 5743 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5744

Testcase 5744 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5745

Testcase 5745 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5746

Testcase 5746 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5747

Testcase 5747 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5748

Testcase 5748 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5749

Testcase 5749 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5750

Testcase 5750 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5751

Testcase 5751 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5752

Testcase 5752 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5753

Testcase 5753 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5754

Testcase 5754 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5755

Testcase 5755 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5756

Testcase 5756 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5757

Testcase 5757 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5758

Testcase 5758 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5759

Testcase 5759 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5760

Testcase 5760 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5761

Testcase 5761 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5762

Testcase 5762 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5763

Testcase 5763 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5764

Testcase 5764 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5765

Testcase 5765 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5766

Testcase 5766 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5767

Testcase 5767 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5768

Testcase 5768 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5769

Testcase 5769 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5770

Testcase 5770 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5771

Testcase 5771 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5772

Testcase 5772 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5773

Testcase 5773 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5774

Testcase 5774 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5775

Testcase 5775 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5776

Testcase 5776 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5777

Testcase 5777 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5778

Testcase 5778 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5779

Testcase 5779 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5780

Testcase 5780 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5781

Testcase 5781 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5782

Testcase 5782 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5783

Testcase 5783 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5784

Testcase 5784 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5785

Testcase 5785 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5786

Testcase 5786 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5787

Testcase 5787 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5788

Testcase 5788 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5789

Testcase 5789 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5790

Testcase 5790 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5791

Testcase 5791 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5792

Testcase 5792 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5793

Testcase 5793 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5794

Testcase 5794 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5795

Testcase 5795 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5796

Testcase 5796 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5797

Testcase 5797 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5798

Testcase 5798 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5799

Testcase 5799 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5800

Testcase 5800 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5801

Testcase 5801 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5802

Testcase 5802 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5803

Testcase 5803 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5804

Testcase 5804 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5805

Testcase 5805 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5806

Testcase 5806 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5807

Testcase 5807 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5808

Testcase 5808 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5809

Testcase 5809 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5810

Testcase 5810 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5811

Testcase 5811 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5812

Testcase 5812 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5813

Testcase 5813 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5814

Testcase 5814 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5815

Testcase 5815 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5816

Testcase 5816 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5817

Testcase 5817 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5818

Testcase 5818 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5819

Testcase 5819 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5820

Testcase 5820 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5821

Testcase 5821 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5822

Testcase 5822 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5823

Testcase 5823 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5824

Testcase 5824 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5825

Testcase 5825 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5826

Testcase 5826 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5827

Testcase 5827 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5828

Testcase 5828 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5829

Testcase 5829 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5830

Testcase 5830 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5831

Testcase 5831 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5832

Testcase 5832 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5833

Testcase 5833 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5834

Testcase 5834 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5835

Testcase 5835 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5836

Testcase 5836 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5837

Testcase 5837 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5838

Testcase 5838 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5839

Testcase 5839 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5840

Testcase 5840 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5841

Testcase 5841 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5842

Testcase 5842 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5843

Testcase 5843 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5844

Testcase 5844 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5845

Testcase 5845 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5846

Testcase 5846 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5847

Testcase 5847 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5848

Testcase 5848 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5849

Testcase 5849 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5850

Testcase 5850 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5851

Testcase 5851 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5852

Testcase 5852 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5853

Testcase 5853 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5854

Testcase 5854 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5855

Testcase 5855 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5856

Testcase 5856 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5857

Testcase 5857 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5858

Testcase 5858 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5859

Testcase 5859 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5860

Testcase 5860 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5861

Testcase 5861 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5862

Testcase 5862 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5863

Testcase 5863 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5864

Testcase 5864 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5865

Testcase 5865 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5866

Testcase 5866 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5867

Testcase 5867 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5868

Testcase 5868 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5869

Testcase 5869 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5870

Testcase 5870 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5871

Testcase 5871 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5872

Testcase 5872 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5873

Testcase 5873 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5874

Testcase 5874 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5875

Testcase 5875 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5876

Testcase 5876 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5877

Testcase 5877 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5878

Testcase 5878 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5879

Testcase 5879 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5880

Testcase 5880 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5881

Testcase 5881 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5882

Testcase 5882 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5883

Testcase 5883 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5884

Testcase 5884 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5885

Testcase 5885 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5886

Testcase 5886 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5887

Testcase 5887 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5888

Testcase 5888 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5889

Testcase 5889 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5890

Testcase 5890 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5891

Testcase 5891 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5892

Testcase 5892 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5893

Testcase 5893 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5894

Testcase 5894 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5895

Testcase 5895 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5896

Testcase 5896 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5897

Testcase 5897 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5898

Testcase 5898 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5899

Testcase 5899 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5900

Testcase 5900 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5901

Testcase 5901 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5902

Testcase 5902 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5903

Testcase 5903 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5904

Testcase 5904 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5905

Testcase 5905 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5906

Testcase 5906 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5907

Testcase 5907 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5908

Testcase 5908 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5909

Testcase 5909 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5910

Testcase 5910 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5911

Testcase 5911 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5912

Testcase 5912 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5913

Testcase 5913 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5914

Testcase 5914 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5915

Testcase 5915 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5916

Testcase 5916 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5917

Testcase 5917 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5918

Testcase 5918 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5919

Testcase 5919 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5920

Testcase 5920 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5921

Testcase 5921 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5922

Testcase 5922 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5923

Testcase 5923 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5924

Testcase 5924 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5925

Testcase 5925 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5926

Testcase 5926 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
openssl-3.4.1	❌ (unexpected failure)	excluded subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	excluded subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5927

Testcase 5927 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5928

Testcase 5928 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
openssl-3.4.1	❌ (unexpected failure)	excluded subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	excluded subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5929

Testcase 5929 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5930

Testcase 5930 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5931

Testcase 5931 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5932

Testcase 5932 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5933

Testcase 5933 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5934

Testcase 5934 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5935

Testcase 5935 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
openssl-3.4.1	❌ (unexpected failure)	excluded subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	excluded subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5936

Testcase 5936 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5937

Testcase 5937 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
openssl-3.4.1	❌ (unexpected failure)	excluded subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	excluded subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5938

Testcase 5938 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5939

Testcase 5939 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5940

Testcase 5940 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5941

Testcase 5941 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5942

Testcase 5942 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5943

Testcase 5943 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5944

Testcase 5944 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5945

Testcase 5945 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5946

Testcase 5946 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5947

Testcase 5947 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5948

Testcase 5948 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5949

Testcase 5949 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5950

Testcase 5950 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5951

Testcase 5951 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5952

Testcase 5952 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5953

Testcase 5953 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5954

Testcase 5954 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5955

Testcase 5955 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5956

Testcase 5956 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5957

Testcase 5957 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5958

Testcase 5958 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5959

Testcase 5959 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5960

Testcase 5960 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5961

Testcase 5961 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5962

Testcase 5962 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5963

Testcase 5963 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5964

Testcase 5964 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5965

Testcase 5965 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5966

Testcase 5966 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5967

Testcase 5967 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5968

Testcase 5968 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5969

Testcase 5969 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5970

Testcase 5970 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5971

Testcase 5971 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5972

Testcase 5972 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5973

Testcase 5973 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5974

Testcase 5974 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5975

Testcase 5975 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5976

Testcase 5976 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5977

Testcase 5977 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5978

Testcase 5978 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5979

Testcase 5979 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5980

Testcase 5980 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
openssl-3.4.1	❌ (unexpected failure)	excluded subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	excluded subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5981

Testcase 5981 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5982

Testcase 5982 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
openssl-3.4.1	❌ (unexpected failure)	excluded subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	excluded subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5983

Testcase 5983 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5984

Testcase 5984 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5985

Testcase 5985 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5986

Testcase 5986 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5987

Testcase 5987 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5988

Testcase 5988 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5989

Testcase 5989 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
openssl-3.4.1	❌ (unexpected failure)	excluded subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	excluded subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5990

Testcase 5990 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5991

Testcase 5991 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
openssl-3.4.1	❌ (unexpected failure)	excluded subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	excluded subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5992

Testcase 5992 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5993

Testcase 5993 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5994

Testcase 5994 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5995

Testcase 5995 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5996

Testcase 5996 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5997

Testcase 5997 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5998

Testcase 5998 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc5999

Testcase 5999 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6000

Testcase 6000 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6001

Testcase 6001 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6002

Testcase 6002 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6003

Testcase 6003 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6004

Testcase 6004 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6005

Testcase 6005 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6006

Testcase 6006 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6007

Testcase 6007 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6008

Testcase 6008 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6009

Testcase 6009 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6010

Testcase 6010 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6011

Testcase 6011 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6012

Testcase 6012 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6013

Testcase 6013 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6014

Testcase 6014 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6015

Testcase 6015 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6016

Testcase 6016 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6017

Testcase 6017 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6018

Testcase 6018 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6019

Testcase 6019 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6020

Testcase 6020 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6021

Testcase 6021 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6022

Testcase 6022 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6023

Testcase 6023 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6024

Testcase 6024 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6025

Testcase 6025 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6026

Testcase 6026 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6027

Testcase 6027 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6028

Testcase 6028 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6029

Testcase 6029 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6030

Testcase 6030 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6031

Testcase 6031 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6032

Testcase 6032 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6033

Testcase 6033 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6034

Testcase 6034 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6035

Testcase 6035 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6036

Testcase 6036 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6037

Testcase 6037 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6038

Testcase 6038 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6039

Testcase 6039 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6040

Testcase 6040 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6041

Testcase 6041 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6042

Testcase 6042 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6043

Testcase 6043 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6044

Testcase 6044 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6045

Testcase 6045 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6046

Testcase 6046 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6047

Testcase 6047 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6048

Testcase 6048 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6049

Testcase 6049 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6050

Testcase 6050 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6051

Testcase 6051 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6052

Testcase 6052 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6053

Testcase 6053 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6054

Testcase 6054 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6055

Testcase 6055 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6056

Testcase 6056 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6057

Testcase 6057 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6058

Testcase 6058 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6059

Testcase 6059 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6060

Testcase 6060 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6061

Testcase 6061 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6062

Testcase 6062 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6063

Testcase 6063 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6064

Testcase 6064 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6065

Testcase 6065 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6066

Testcase 6066 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6067

Testcase 6067 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6068

Testcase 6068 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6069

Testcase 6069 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6070

Testcase 6070 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6071

Testcase 6071 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6072

Testcase 6072 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6073

Testcase 6073 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6074

Testcase 6074 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6075

Testcase 6075 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6076

Testcase 6076 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6077

Testcase 6077 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6078

Testcase 6078 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6079

Testcase 6079 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6080

Testcase 6080 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6081

Testcase 6081 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6082

Testcase 6082 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6083

Testcase 6083 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6084

Testcase 6084 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6085

Testcase 6085 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6086

Testcase 6086 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6087

Testcase 6087 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6088

Testcase 6088 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6089

Testcase 6089 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6090

Testcase 6090 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6091

Testcase 6091 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6092

Testcase 6092 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6093

Testcase 6093 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6094

Testcase 6094 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6095

Testcase 6095 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6096

Testcase 6096 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6097

Testcase 6097 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6098

Testcase 6098 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6099

Testcase 6099 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6100

Testcase 6100 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6101

Testcase 6101 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6102

Testcase 6102 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6103

Testcase 6103 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6104

Testcase 6104 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6105

Testcase 6105 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6106

Testcase 6106 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6107

Testcase 6107 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6108

Testcase 6108 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6109

Testcase 6109 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6110

Testcase 6110 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6111

Testcase 6111 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6112

Testcase 6112 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6113

Testcase 6113 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6114

Testcase 6114 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6115

Testcase 6115 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6116

Testcase 6116 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6117

Testcase 6117 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6118

Testcase 6118 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6119

Testcase 6119 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6120

Testcase 6120 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6121

Testcase 6121 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6122

Testcase 6122 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6123

Testcase 6123 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6124

Testcase 6124 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6125

Testcase 6125 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6126

Testcase 6126 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6127

Testcase 6127 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6128

Testcase 6128 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6129

Testcase 6129 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6130

Testcase 6130 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6131

Testcase 6131 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6132

Testcase 6132 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6133

Testcase 6133 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6134

Testcase 6134 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6135

Testcase 6135 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6136

Testcase 6136 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6137

Testcase 6137 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6138

Testcase 6138 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6139

Testcase 6139 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6140

Testcase 6140 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6141

Testcase 6141 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6142

Testcase 6142 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6143

Testcase 6143 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6144

Testcase 6144 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6145

Testcase 6145 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6146

Testcase 6146 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6147

Testcase 6147 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6148

Testcase 6148 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6149

Testcase 6149 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6150

Testcase 6150 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6151

Testcase 6151 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6152

Testcase 6152 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6153

Testcase 6153 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6154

Testcase 6154 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6155

Testcase 6155 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6156

Testcase 6156 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6157

Testcase 6157 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6158

Testcase 6158 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6159

Testcase 6159 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6160

Testcase 6160 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6161

Testcase 6161 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6162

Testcase 6162 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6163

Testcase 6163 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6164

Testcase 6164 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6165

Testcase 6165 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6166

Testcase 6166 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6167

Testcase 6167 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6168

Testcase 6168 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6169

Testcase 6169 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6170

Testcase 6170 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6171

Testcase 6171 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6172

Testcase 6172 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6173

Testcase 6173 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6174

Testcase 6174 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6175

Testcase 6175 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6176

Testcase 6176 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6177

Testcase 6177 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6178

Testcase 6178 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6179

Testcase 6179 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6180

Testcase 6180 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6181

Testcase 6181 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6182

Testcase 6182 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6183

Testcase 6183 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6184

Testcase 6184 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6185

Testcase 6185 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6186

Testcase 6186 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6187

Testcase 6187 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6188

Testcase 6188 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6189

Testcase 6189 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6190

Testcase 6190 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6191

Testcase 6191 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6192

Testcase 6192 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6193

Testcase 6193 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6194

Testcase 6194 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6195

Testcase 6195 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6196

Testcase 6196 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6197

Testcase 6197 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6198

Testcase 6198 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6199

Testcase 6199 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6200

Testcase 6200 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6201

Testcase 6201 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6202

Testcase 6202 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6203

Testcase 6203 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6204

Testcase 6204 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6205

Testcase 6205 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6206

Testcase 6206 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6207

Testcase 6207 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6208

Testcase 6208 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6209

Testcase 6209 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6210

Testcase 6210 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6211

Testcase 6211 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6212

Testcase 6212 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6213

Testcase 6213 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6214

Testcase 6214 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6215

Testcase 6215 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6216

Testcase 6216 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6217

Testcase 6217 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6218

Testcase 6218 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6219

Testcase 6219 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6220

Testcase 6220 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6221

Testcase 6221 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6222

Testcase 6222 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6223

Testcase 6223 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6224

Testcase 6224 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6225

Testcase 6225 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6226

Testcase 6226 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6227

Testcase 6227 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6228

Testcase 6228 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6229

Testcase 6229 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6230

Testcase 6230 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6231

Testcase 6231 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6232

Testcase 6232 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6233

Testcase 6233 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6234

Testcase 6234 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6235

Testcase 6235 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6236

Testcase 6236 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6237

Testcase 6237 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6238

Testcase 6238 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6239

Testcase 6239 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6240

Testcase 6240 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6241

Testcase 6241 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6242

Testcase 6242 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6243

Testcase 6243 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6244

Testcase 6244 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6245

Testcase 6245 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6246

Testcase 6246 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6247

Testcase 6247 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6248

Testcase 6248 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6249

Testcase 6249 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6250

Testcase 6250 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6251

Testcase 6251 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6252

Testcase 6252 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6253

Testcase 6253 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6254

Testcase 6254 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6255

Testcase 6255 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6256

Testcase 6256 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6257

Testcase 6257 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6258

Testcase 6258 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6259

Testcase 6259 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6260

Testcase 6260 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6261

Testcase 6261 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6262

Testcase 6262 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6263

Testcase 6263 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6264

Testcase 6264 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6265

Testcase 6265 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6266

Testcase 6266 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6267

Testcase 6267 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6268

Testcase 6268 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6269

Testcase 6269 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6270

Testcase 6270 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6271

Testcase 6271 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6272

Testcase 6272 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6273

Testcase 6273 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6274

Testcase 6274 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6275

Testcase 6275 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6276

Testcase 6276 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6277

Testcase 6277 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6278

Testcase 6278 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6279

Testcase 6279 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6280

Testcase 6280 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6281

Testcase 6281 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6282

Testcase 6282 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6283

Testcase 6283 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6284

Testcase 6284 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6285

Testcase 6285 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6286

Testcase 6286 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6287

Testcase 6287 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6288

Testcase 6288 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6289

Testcase 6289 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6290

Testcase 6290 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6291

Testcase 6291 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6292

Testcase 6292 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6293

Testcase 6293 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6294

Testcase 6294 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6295

Testcase 6295 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6296

Testcase 6296 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6297

Testcase 6297 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6298

Testcase 6298 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6299

Testcase 6299 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6300

Testcase 6300 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6301

Testcase 6301 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6302

Testcase 6302 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6303

Testcase 6303 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6304

Testcase 6304 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6305

Testcase 6305 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6306

Testcase 6306 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6307

Testcase 6307 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6308

Testcase 6308 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6309

Testcase 6309 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6310

Testcase 6310 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6311

Testcase 6311 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6312

Testcase 6312 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6313

Testcase 6313 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6314

Testcase 6314 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6315

Testcase 6315 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6316

Testcase 6316 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6317

Testcase 6317 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6318

Testcase 6318 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6319

Testcase 6319 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6320

Testcase 6320 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6321

Testcase 6321 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6322

Testcase 6322 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6323

Testcase 6323 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6324

Testcase 6324 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6325

Testcase 6325 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6326

Testcase 6326 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6327

Testcase 6327 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6328

Testcase 6328 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6329

Testcase 6329 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6330

Testcase 6330 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6331

Testcase 6331 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6332

Testcase 6332 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6333

Testcase 6333 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6334

Testcase 6334 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6335

Testcase 6335 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6336

Testcase 6336 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6337

Testcase 6337 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6338

Testcase 6338 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6339

Testcase 6339 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6340

Testcase 6340 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6341

Testcase 6341 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6342

Testcase 6342 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6343

Testcase 6343 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6344

Testcase 6344 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6345

Testcase 6345 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6346

Testcase 6346 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6347

Testcase 6347 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6348

Testcase 6348 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6349

Testcase 6349 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6350

Testcase 6350 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6351

Testcase 6351 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6352

Testcase 6352 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6353

Testcase 6353 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6354

Testcase 6354 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6355

Testcase 6355 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6356

Testcase 6356 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6357

Testcase 6357 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6358

Testcase 6358 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6359

Testcase 6359 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6360

Testcase 6360 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6361

Testcase 6361 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6362

Testcase 6362 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6363

Testcase 6363 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6364

Testcase 6364 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6365

Testcase 6365 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6366

Testcase 6366 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6367

Testcase 6367 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6368

Testcase 6368 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6369

Testcase 6369 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6370

Testcase 6370 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6371

Testcase 6371 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6372

Testcase 6372 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6373

Testcase 6373 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6374

Testcase 6374 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6375

Testcase 6375 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6376

Testcase 6376 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6377

Testcase 6377 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6378

Testcase 6378 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6379

Testcase 6379 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6380

Testcase 6380 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6381

Testcase 6381 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6382

Testcase 6382 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6383

Testcase 6383 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6384

Testcase 6384 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6385

Testcase 6385 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6386

Testcase 6386 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6387

Testcase 6387 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6388

Testcase 6388 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6389

Testcase 6389 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6390

Testcase 6390 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6391

Testcase 6391 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6392

Testcase 6392 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6393

Testcase 6393 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6394

Testcase 6394 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6395

Testcase 6395 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6396

Testcase 6396 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6397

Testcase 6397 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6398

Testcase 6398 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6399

Testcase 6399 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6400

Testcase 6400 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6401

Testcase 6401 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6402

Testcase 6402 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6403

Testcase 6403 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6404

Testcase 6404 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6405

Testcase 6405 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6406

Testcase 6406 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6407

Testcase 6407 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6408

Testcase 6408 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6409

Testcase 6409 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6410

Testcase 6410 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6411

Testcase 6411 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6412

Testcase 6412 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6413

Testcase 6413 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6414

Testcase 6414 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6415

Testcase 6415 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6416

Testcase 6416 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6417

Testcase 6417 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6418

Testcase 6418 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6419

Testcase 6419 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6420

Testcase 6420 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6421

Testcase 6421 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6422

Testcase 6422 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6423

Testcase 6423 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6424

Testcase 6424 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6425

Testcase 6425 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6426

Testcase 6426 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6427

Testcase 6427 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6428

Testcase 6428 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6429

Testcase 6429 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6430

Testcase 6430 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6431

Testcase 6431 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6432

Testcase 6432 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6433

Testcase 6433 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6434

Testcase 6434 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6435

Testcase 6435 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6436

Testcase 6436 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6437

Testcase 6437 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6438

Testcase 6438 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6439

Testcase 6439 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6440

Testcase 6440 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6441

Testcase 6441 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6442

Testcase 6442 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6443

Testcase 6443 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6444

Testcase 6444 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6445

Testcase 6445 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6446

Testcase 6446 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6447

Testcase 6447 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6448

Testcase 6448 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6449

Testcase 6449 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6450

Testcase 6450 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6451

Testcase 6451 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6452

Testcase 6452 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6453

Testcase 6453 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6454

Testcase 6454 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6455

Testcase 6455 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6456

Testcase 6456 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6457

Testcase 6457 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6458

Testcase 6458 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6459

Testcase 6459 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6460

Testcase 6460 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6461

Testcase 6461 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6462

Testcase 6462 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6463

Testcase 6463 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6464

Testcase 6464 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6465

Testcase 6465 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6466

Testcase 6466 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6467

Testcase 6467 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6468

Testcase 6468 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6469

Testcase 6469 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6470

Testcase 6470 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6471

Testcase 6471 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6472

Testcase 6472 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6473

Testcase 6473 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6474

Testcase 6474 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6475

Testcase 6475 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6476

Testcase 6476 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6477

Testcase 6477 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6478

Testcase 6478 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6479

Testcase 6479 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6480

Testcase 6480 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6481

Testcase 6481 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6482

Testcase 6482 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6483

Testcase 6483 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6484

Testcase 6484 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6485

Testcase 6485 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6486

Testcase 6486 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6487

Testcase 6487 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6488

Testcase 6488 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6489

Testcase 6489 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6490

Testcase 6490 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6491

Testcase 6491 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6492

Testcase 6492 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6493

Testcase 6493 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6494

Testcase 6494 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6495

Testcase 6495 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6496

Testcase 6496 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6497

Testcase 6497 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6498

Testcase 6498 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6499

Testcase 6499 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6500

Testcase 6500 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6501

Testcase 6501 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6502

Testcase 6502 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6503

Testcase 6503 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6504

Testcase 6504 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6505

Testcase 6505 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6506

Testcase 6506 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6507

Testcase 6507 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6508

Testcase 6508 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6509

Testcase 6509 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6510

Testcase 6510 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6511

Testcase 6511 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6512

Testcase 6512 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6513

Testcase 6513 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6514

Testcase 6514 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6515

Testcase 6515 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6516

Testcase 6516 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6517

Testcase 6517 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6518

Testcase 6518 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6519

Testcase 6519 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6520

Testcase 6520 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6521

Testcase 6521 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6522

Testcase 6522 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6523

Testcase 6523 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6524

Testcase 6524 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6525

Testcase 6525 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6526

Testcase 6526 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6527

Testcase 6527 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6528

Testcase 6528 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6529

Testcase 6529 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6530

Testcase 6530 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6531

Testcase 6531 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6532

Testcase 6532 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6533

Testcase 6533 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6534

Testcase 6534 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6535

Testcase 6535 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6536

Testcase 6536 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6537

Testcase 6537 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6538

Testcase 6538 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6539

Testcase 6539 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6540

Testcase 6540 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6541

Testcase 6541 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6542

Testcase 6542 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6543

Testcase 6543 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6544

Testcase 6544 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6545

Testcase 6545 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6546

Testcase 6546 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6547

Testcase 6547 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6548

Testcase 6548 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6549

Testcase 6549 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6550

Testcase 6550 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6551

Testcase 6551 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6552

Testcase 6552 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6553

Testcase 6553 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6554

Testcase 6554 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6555

Testcase 6555 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6556

Testcase 6556 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6557

Testcase 6557 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6558

Testcase 6558 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6559

Testcase 6559 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6560

Testcase 6560 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6561

Testcase 6561 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6562

Testcase 6562 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6563

Testcase 6563 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6564

Testcase 6564 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6565

Testcase 6565 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6566

Testcase 6566 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6567

Testcase 6567 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6568

Testcase 6568 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6569

Testcase 6569 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6570

Testcase 6570 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6571

Testcase 6571 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6572

Testcase 6572 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6573

Testcase 6573 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6574

Testcase 6574 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6575

Testcase 6575 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6576

Testcase 6576 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6577

Testcase 6577 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6578

Testcase 6578 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6579

Testcase 6579 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6580

Testcase 6580 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6581

Testcase 6581 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6582

Testcase 6582 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6583

Testcase 6583 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6584

Testcase 6584 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6585

Testcase 6585 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6586

Testcase 6586 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6587

Testcase 6587 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6588

Testcase 6588 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6589

Testcase 6589 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6590

Testcase 6590 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6591

Testcase 6591 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6592

Testcase 6592 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6593

Testcase 6593 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6594

Testcase 6594 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6595

Testcase 6595 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6596

Testcase 6596 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6597

Testcase 6597 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6598

Testcase 6598 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6599

Testcase 6599 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6600

Testcase 6600 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6601

Testcase 6601 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6602

Testcase 6602 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6603

Testcase 6603 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6604

Testcase 6604 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6605

Testcase 6605 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6606

Testcase 6606 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6607

Testcase 6607 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6608

Testcase 6608 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6609

Testcase 6609 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6610

Testcase 6610 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6611

Testcase 6611 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6612

Testcase 6612 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6613

Testcase 6613 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6614

Testcase 6614 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6615

Testcase 6615 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6616

Testcase 6616 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6617

Testcase 6617 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6618

Testcase 6618 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6619

Testcase 6619 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6620

Testcase 6620 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6621

Testcase 6621 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6622

Testcase 6622 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6623

Testcase 6623 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6624

Testcase 6624 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6625

Testcase 6625 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6626

Testcase 6626 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6627

Testcase 6627 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6628

Testcase 6628 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6629

Testcase 6629 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6630

Testcase 6630 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6631

Testcase 6631 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6632

Testcase 6632 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6633

Testcase 6633 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6634

Testcase 6634 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6635

Testcase 6635 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6636

Testcase 6636 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6637

Testcase 6637 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6638

Testcase 6638 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6639

Testcase 6639 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6640

Testcase 6640 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6641

Testcase 6641 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6642

Testcase 6642 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6643

Testcase 6643 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6644

Testcase 6644 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6645

Testcase 6645 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6646

Testcase 6646 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6647

Testcase 6647 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6648

Testcase 6648 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6649

Testcase 6649 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6650

Testcase 6650 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6651

Testcase 6651 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6652

Testcase 6652 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6653

Testcase 6653 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6654

Testcase 6654 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6655

Testcase 6655 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6656

Testcase 6656 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6657

Testcase 6657 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6658

Testcase 6658 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6659

Testcase 6659 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6660

Testcase 6660 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6661

Testcase 6661 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6662

Testcase 6662 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6663

Testcase 6663 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6664

Testcase 6664 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6665

Testcase 6665 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6666

Testcase 6666 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6667

Testcase 6667 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6668

Testcase 6668 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6669

Testcase 6669 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6670

Testcase 6670 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6671

Testcase 6671 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6672

Testcase 6672 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6673

Testcase 6673 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6674

Testcase 6674 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6675

Testcase 6675 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6676

Testcase 6676 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6677

Testcase 6677 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6678

Testcase 6678 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6679

Testcase 6679 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6680

Testcase 6680 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6681

Testcase 6681 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6682

Testcase 6682 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6683

Testcase 6683 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6684

Testcase 6684 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6685

Testcase 6685 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6686

Testcase 6686 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6687

Testcase 6687 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6688

Testcase 6688 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6689

Testcase 6689 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6690

Testcase 6690 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6691

Testcase 6691 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6692

Testcase 6692 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6693

Testcase 6693 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6694

Testcase 6694 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6695

Testcase 6695 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6696

Testcase 6696 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6697

Testcase 6697 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6698

Testcase 6698 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6699

Testcase 6699 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6700

Testcase 6700 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6701

Testcase 6701 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6702

Testcase 6702 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6703

Testcase 6703 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6704

Testcase 6704 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6705

Testcase 6705 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6706

Testcase 6706 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6707

Testcase 6707 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6708

Testcase 6708 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6709

Testcase 6709 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6710

Testcase 6710 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6711

Testcase 6711 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6712

Testcase 6712 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6713

Testcase 6713 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6714

Testcase 6714 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6715

Testcase 6715 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6716

Testcase 6716 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6717

Testcase 6717 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6718

Testcase 6718 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6719

Testcase 6719 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6720

Testcase 6720 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6721

Testcase 6721 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6722

Testcase 6722 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6723

Testcase 6723 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6724

Testcase 6724 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6725

Testcase 6725 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6726

Testcase 6726 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6727

Testcase 6727 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6728

Testcase 6728 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6729

Testcase 6729 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6730

Testcase 6730 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6731

Testcase 6731 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6732

Testcase 6732 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6733

Testcase 6733 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6734

Testcase 6734 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6735

Testcase 6735 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6736

Testcase 6736 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6737

Testcase 6737 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6738

Testcase 6738 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6739

Testcase 6739 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6740

Testcase 6740 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6741

Testcase 6741 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6742

Testcase 6742 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6743

Testcase 6743 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6744

Testcase 6744 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6745

Testcase 6745 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6746

Testcase 6746 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6747

Testcase 6747 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6748

Testcase 6748 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6749

Testcase 6749 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6750

Testcase 6750 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6751

Testcase 6751 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6752

Testcase 6752 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6753

Testcase 6753 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6754

Testcase 6754 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6755

Testcase 6755 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6756

Testcase 6756 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6757

Testcase 6757 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6758

Testcase 6758 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6759

Testcase 6759 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6760

Testcase 6760 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6761

Testcase 6761 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6762

Testcase 6762 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6763

Testcase 6763 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6764

Testcase 6764 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6765

Testcase 6765 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6766

Testcase 6766 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6767

Testcase 6767 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6768

Testcase 6768 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6769

Testcase 6769 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6770

Testcase 6770 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6771

Testcase 6771 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6772

Testcase 6772 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6773

Testcase 6773 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6774

Testcase 6774 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6775

Testcase 6775 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6776

Testcase 6776 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6777

Testcase 6777 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6778

Testcase 6778 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6779

Testcase 6779 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6780

Testcase 6780 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6781

Testcase 6781 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6782

Testcase 6782 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6783

Testcase 6783 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6784

Testcase 6784 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6785

Testcase 6785 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6786

Testcase 6786 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6787

Testcase 6787 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6788

Testcase 6788 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6789

Testcase 6789 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6790

Testcase 6790 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6791

Testcase 6791 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6792

Testcase 6792 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6793

Testcase 6793 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6794

Testcase 6794 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6795

Testcase 6795 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6796

Testcase 6796 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6797

Testcase 6797 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6798

Testcase 6798 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6799

Testcase 6799 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6800

Testcase 6800 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6801

Testcase 6801 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6802

Testcase 6802 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6803

Testcase 6803 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6804

Testcase 6804 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6805

Testcase 6805 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6806

Testcase 6806 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6807

Testcase 6807 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6808

Testcase 6808 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6809

Testcase 6809 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6810

Testcase 6810 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6811

Testcase 6811 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6812

Testcase 6812 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6813

Testcase 6813 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6814

Testcase 6814 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6815

Testcase 6815 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6816

Testcase 6816 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6817

Testcase 6817 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6818

Testcase 6818 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6819

Testcase 6819 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6820

Testcase 6820 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6821

Testcase 6821 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6822

Testcase 6822 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6823

Testcase 6823 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6824

Testcase 6824 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6825

Testcase 6825 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6826

Testcase 6826 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6827

Testcase 6827 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6828

Testcase 6828 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6829

Testcase 6829 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6830

Testcase 6830 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6831

Testcase 6831 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6832

Testcase 6832 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6833

Testcase 6833 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6834

Testcase 6834 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6835

Testcase 6835 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6836

Testcase 6836 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6837

Testcase 6837 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6838

Testcase 6838 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6839

Testcase 6839 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6840

Testcase 6840 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6841

Testcase 6841 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6842

Testcase 6842 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6843

Testcase 6843 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6844

Testcase 6844 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6845

Testcase 6845 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6846

Testcase 6846 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6847

Testcase 6847 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6848

Testcase 6848 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6849

Testcase 6849 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6850

Testcase 6850 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6851

Testcase 6851 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6852

Testcase 6852 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6853

Testcase 6853 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6854

Testcase 6854 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6855

Testcase 6855 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6856

Testcase 6856 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6857

Testcase 6857 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6858

Testcase 6858 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6859

Testcase 6859 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6860

Testcase 6860 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6861

Testcase 6861 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6862

Testcase 6862 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6863

Testcase 6863 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6864

Testcase 6864 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6865

Testcase 6865 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6866

Testcase 6866 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6867

Testcase 6867 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6868

Testcase 6868 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6869

Testcase 6869 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6870

Testcase 6870 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6871

Testcase 6871 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6872

Testcase 6872 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6873

Testcase 6873 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6874

Testcase 6874 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6875

Testcase 6875 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6876

Testcase 6876 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6877

Testcase 6877 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6878

Testcase 6878 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6879

Testcase 6879 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6880

Testcase 6880 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6881

Testcase 6881 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6882

Testcase 6882 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6883

Testcase 6883 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6884

Testcase 6884 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6885

Testcase 6885 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6886

Testcase 6886 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6887

Testcase 6887 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6888

Testcase 6888 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6889

Testcase 6889 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6890

Testcase 6890 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6891

Testcase 6891 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6892

Testcase 6892 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6893

Testcase 6893 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6894

Testcase 6894 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6895

Testcase 6895 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6896

Testcase 6896 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6897

Testcase 6897 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6898

Testcase 6898 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6899

Testcase 6899 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6900

Testcase 6900 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6901

Testcase 6901 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6902

Testcase 6902 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6903

Testcase 6903 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6904

Testcase 6904 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6905

Testcase 6905 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6906

Testcase 6906 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6907

Testcase 6907 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6908

Testcase 6908 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6909

Testcase 6909 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6910

Testcase 6910 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6911

Testcase 6911 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6912

Testcase 6912 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6913

Testcase 6913 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6914

Testcase 6914 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6915

Testcase 6915 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6916

Testcase 6916 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6917

Testcase 6917 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6918

Testcase 6918 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6919

Testcase 6919 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6920

Testcase 6920 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6921

Testcase 6921 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6922

Testcase 6922 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6923

Testcase 6923 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6924

Testcase 6924 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6925

Testcase 6925 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6926

Testcase 6926 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6927

Testcase 6927 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6928

Testcase 6928 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6929

Testcase 6929 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6930

Testcase 6930 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6931

Testcase 6931 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6932

Testcase 6932 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6933

Testcase 6933 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6934

Testcase 6934 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6935

Testcase 6935 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6936

Testcase 6936 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6937

Testcase 6937 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6938

Testcase 6938 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6939

Testcase 6939 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6940

Testcase 6940 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6941

Testcase 6941 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6942

Testcase 6942 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6943

Testcase 6943 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6944

Testcase 6944 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6945

Testcase 6945 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6946

Testcase 6946 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6947

Testcase 6947 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6948

Testcase 6948 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6949

Testcase 6949 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6950

Testcase 6950 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6951

Testcase 6951 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6952

Testcase 6952 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6953

Testcase 6953 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6954

Testcase 6954 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6955

Testcase 6955 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6956

Testcase 6956 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6957

Testcase 6957 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6958

Testcase 6958 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6959

Testcase 6959 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6960

Testcase 6960 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6961

Testcase 6961 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6962

Testcase 6962 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6963

Testcase 6963 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6964

Testcase 6964 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6965

Testcase 6965 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6966

Testcase 6966 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6967

Testcase 6967 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6968

Testcase 6968 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6969

Testcase 6969 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6970

Testcase 6970 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6971

Testcase 6971 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6972

Testcase 6972 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6973

Testcase 6973 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6974

Testcase 6974 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6975

Testcase 6975 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6976

Testcase 6976 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6977

Testcase 6977 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6978

Testcase 6978 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6979

Testcase 6979 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6980

Testcase 6980 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6981

Testcase 6981 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6982

Testcase 6982 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6983

Testcase 6983 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6984

Testcase 6984 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6985

Testcase 6985 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6986

Testcase 6986 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6987

Testcase 6987 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6988

Testcase 6988 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6989

Testcase 6989 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6990

Testcase 6990 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6991

Testcase 6991 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6992

Testcase 6992 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6993

Testcase 6993 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6994

Testcase 6994 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6995

Testcase 6995 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6996

Testcase 6996 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6997

Testcase 6997 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6998

Testcase 6998 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc6999

Testcase 6999 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7000

Testcase 7000 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7001

Testcase 7001 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7002

Testcase 7002 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7003

Testcase 7003 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7004

Testcase 7004 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7005

Testcase 7005 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7006

Testcase 7006 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7007

Testcase 7007 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7008

Testcase 7008 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7009

Testcase 7009 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7010

Testcase 7010 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7011

Testcase 7011 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7012

Testcase 7012 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7013

Testcase 7013 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7014

Testcase 7014 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7015

Testcase 7015 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7016

Testcase 7016 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7017

Testcase 7017 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7018

Testcase 7018 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7019

Testcase 7019 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7020

Testcase 7020 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7021

Testcase 7021 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7022

Testcase 7022 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7023

Testcase 7023 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7024

Testcase 7024 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7025

Testcase 7025 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7026

Testcase 7026 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7027

Testcase 7027 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7028

Testcase 7028 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7029

Testcase 7029 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7030

Testcase 7030 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7031

Testcase 7031 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7032

Testcase 7032 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7033

Testcase 7033 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7034

Testcase 7034 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7035

Testcase 7035 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7036

Testcase 7036 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7037

Testcase 7037 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7038

Testcase 7038 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7039

Testcase 7039 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7040

Testcase 7040 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7041

Testcase 7041 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7042

Testcase 7042 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7043

Testcase 7043 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7044

Testcase 7044 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7045

Testcase 7045 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7046

Testcase 7046 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7047

Testcase 7047 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7048

Testcase 7048 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7049

Testcase 7049 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7050

Testcase 7050 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7051

Testcase 7051 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7052

Testcase 7052 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7053

Testcase 7053 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7054

Testcase 7054 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7055

Testcase 7055 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7056

Testcase 7056 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7057

Testcase 7057 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7058

Testcase 7058 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7059

Testcase 7059 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7060

Testcase 7060 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7061

Testcase 7061 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7062

Testcase 7062 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7063

Testcase 7063 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7064

Testcase 7064 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7065

Testcase 7065 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7066

Testcase 7066 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7067

Testcase 7067 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7068

Testcase 7068 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7069

Testcase 7069 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7070

Testcase 7070 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7071

Testcase 7071 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7072

Testcase 7072 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7073

Testcase 7073 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7074

Testcase 7074 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7075

Testcase 7075 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7076

Testcase 7076 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7077

Testcase 7077 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7078

Testcase 7078 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7079

Testcase 7079 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7080

Testcase 7080 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7081

Testcase 7081 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7082

Testcase 7082 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7083

Testcase 7083 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7084

Testcase 7084 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7085

Testcase 7085 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7086

Testcase 7086 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7087

Testcase 7087 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7088

Testcase 7088 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7089

Testcase 7089 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7090

Testcase 7090 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7091

Testcase 7091 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7092

Testcase 7092 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7093

Testcase 7093 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7094

Testcase 7094 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7095

Testcase 7095 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7096

Testcase 7096 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7097

Testcase 7097 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7098

Testcase 7098 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7099

Testcase 7099 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7100

Testcase 7100 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7101

Testcase 7101 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7102

Testcase 7102 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7103

Testcase 7103 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7104

Testcase 7104 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7105

Testcase 7105 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7106

Testcase 7106 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7107

Testcase 7107 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7108

Testcase 7108 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7109

Testcase 7109 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7110

Testcase 7110 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7111

Testcase 7111 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7112

Testcase 7112 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7113

Testcase 7113 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7114

Testcase 7114 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7115

Testcase 7115 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7116

Testcase 7116 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7117

Testcase 7117 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7118

Testcase 7118 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7119

Testcase 7119 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7120

Testcase 7120 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7121

Testcase 7121 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7122

Testcase 7122 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7123

Testcase 7123 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7124

Testcase 7124 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7125

Testcase 7125 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7126

Testcase 7126 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7127

Testcase 7127 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7128

Testcase 7128 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7129

Testcase 7129 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7130

Testcase 7130 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7131

Testcase 7131 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7132

Testcase 7132 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7133

Testcase 7133 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7134

Testcase 7134 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7135

Testcase 7135 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7136

Testcase 7136 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7137

Testcase 7137 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7138

Testcase 7138 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7139

Testcase 7139 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7140

Testcase 7140 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7141

Testcase 7141 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7142

Testcase 7142 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7143

Testcase 7143 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7144

Testcase 7144 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7145

Testcase 7145 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7146

Testcase 7146 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7147

Testcase 7147 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7148

Testcase 7148 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7149

Testcase 7149 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7150

Testcase 7150 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7151

Testcase 7151 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7152

Testcase 7152 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7153

Testcase 7153 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7154

Testcase 7154 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7155

Testcase 7155 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7156

Testcase 7156 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7157

Testcase 7157 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7158

Testcase 7158 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7159

Testcase 7159 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7160

Testcase 7160 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7161

Testcase 7161 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7162

Testcase 7162 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7163

Testcase 7163 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7164

Testcase 7164 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7165

Testcase 7165 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7166

Testcase 7166 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7167

Testcase 7167 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7168

Testcase 7168 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7169

Testcase 7169 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7170

Testcase 7170 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7171

Testcase 7171 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7172

Testcase 7172 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7173

Testcase 7173 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7174

Testcase 7174 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7175

Testcase 7175 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7176

Testcase 7176 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7177

Testcase 7177 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7178

Testcase 7178 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7179

Testcase 7179 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7180

Testcase 7180 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7181

Testcase 7181 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7182

Testcase 7182 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7183

Testcase 7183 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7184

Testcase 7184 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7185

Testcase 7185 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7186

Testcase 7186 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7187

Testcase 7187 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7188

Testcase 7188 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7189

Testcase 7189 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7190

Testcase 7190 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7191

Testcase 7191 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7192

Testcase 7192 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7193

Testcase 7193 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7194

Testcase 7194 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7195

Testcase 7195 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7196

Testcase 7196 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7197

Testcase 7197 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7198

Testcase 7198 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7199

Testcase 7199 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7200

Testcase 7200 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7201

Testcase 7201 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7202

Testcase 7202 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7203

Testcase 7203 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7204

Testcase 7204 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7205

Testcase 7205 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7206

Testcase 7206 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7207

Testcase 7207 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7208

Testcase 7208 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7209

Testcase 7209 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7210

Testcase 7210 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7211

Testcase 7211 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7212

Testcase 7212 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7213

Testcase 7213 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7214

Testcase 7214 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7215

Testcase 7215 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7216

Testcase 7216 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7217

Testcase 7217 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7218

Testcase 7218 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7219

Testcase 7219 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7220

Testcase 7220 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7221

Testcase 7221 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7222

Testcase 7222 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7223

Testcase 7223 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7224

Testcase 7224 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7225

Testcase 7225 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7226

Testcase 7226 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7227

Testcase 7227 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7228

Testcase 7228 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7229

Testcase 7229 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7230

Testcase 7230 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7231

Testcase 7231 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7232

Testcase 7232 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7233

Testcase 7233 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7234

Testcase 7234 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7235

Testcase 7235 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7236

Testcase 7236 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7237

Testcase 7237 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7238

Testcase 7238 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7239

Testcase 7239 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7240

Testcase 7240 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7241

Testcase 7241 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7242

Testcase 7242 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7243

Testcase 7243 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7244

Testcase 7244 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7245

Testcase 7245 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7246

Testcase 7246 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7247

Testcase 7247 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7248

Testcase 7248 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7249

Testcase 7249 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7250

Testcase 7250 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7251

Testcase 7251 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7252

Testcase 7252 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7253

Testcase 7253 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7254

Testcase 7254 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7255

Testcase 7255 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7256

Testcase 7256 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7257

Testcase 7257 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7258

Testcase 7258 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7259

Testcase 7259 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7260

Testcase 7260 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7261

Testcase 7261 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7262

Testcase 7262 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7263

Testcase 7263 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7264

Testcase 7264 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7265

Testcase 7265 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7266

Testcase 7266 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7267

Testcase 7267 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7268

Testcase 7268 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7269

Testcase 7269 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7270

Testcase 7270 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7271

Testcase 7271 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7272

Testcase 7272 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7273

Testcase 7273 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7274

Testcase 7274 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7275

Testcase 7275 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7276

Testcase 7276 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7277

Testcase 7277 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7278

Testcase 7278 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7279

Testcase 7279 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7280

Testcase 7280 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7281

Testcase 7281 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7282

Testcase 7282 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7283

Testcase 7283 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7284

Testcase 7284 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7285

Testcase 7285 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7286

Testcase 7286 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7287

Testcase 7287 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7288

Testcase 7288 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7289

Testcase 7289 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7290

Testcase 7290 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7291

Testcase 7291 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7292

Testcase 7292 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7293

Testcase 7293 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7294

Testcase 7294 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7295

Testcase 7295 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7296

Testcase 7296 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7297

Testcase 7297 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7298

Testcase 7298 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7299

Testcase 7299 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7300

Testcase 7300 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7301

Testcase 7301 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7302

Testcase 7302 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7303

Testcase 7303 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7304

Testcase 7304 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7305

Testcase 7305 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7306

Testcase 7306 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7307

Testcase 7307 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7308

Testcase 7308 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7309

Testcase 7309 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7310

Testcase 7310 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7311

Testcase 7311 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7312

Testcase 7312 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7313

Testcase 7313 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7314

Testcase 7314 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7315

Testcase 7315 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7316

Testcase 7316 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7317

Testcase 7317 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7318

Testcase 7318 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7319

Testcase 7319 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7320

Testcase 7320 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7321

Testcase 7321 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7322

Testcase 7322 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7323

Testcase 7323 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7324

Testcase 7324 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7325

Testcase 7325 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7326

Testcase 7326 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7327

Testcase 7327 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7328

Testcase 7328 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7329

Testcase 7329 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7330

Testcase 7330 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7331

Testcase 7331 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7332

Testcase 7332 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7333

Testcase 7333 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7334

Testcase 7334 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7335

Testcase 7335 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7336

Testcase 7336 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7337

Testcase 7337 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7338

Testcase 7338 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7339

Testcase 7339 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7340

Testcase 7340 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7341

Testcase 7341 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7342

Testcase 7342 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7343

Testcase 7343 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7344

Testcase 7344 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7345

Testcase 7345 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7346

Testcase 7346 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7347

Testcase 7347 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7348

Testcase 7348 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7349

Testcase 7349 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7350

Testcase 7350 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7351

Testcase 7351 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7352

Testcase 7352 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7353

Testcase 7353 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7354

Testcase 7354 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7355

Testcase 7355 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7356

Testcase 7356 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7357

Testcase 7357 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7358

Testcase 7358 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7359

Testcase 7359 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7360

Testcase 7360 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7361

Testcase 7361 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7362

Testcase 7362 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7363

Testcase 7363 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7364

Testcase 7364 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7365

Testcase 7365 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7366

Testcase 7366 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7367

Testcase 7367 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7368

Testcase 7368 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7369

Testcase 7369 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7370

Testcase 7370 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7371

Testcase 7371 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7372

Testcase 7372 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7373

Testcase 7373 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7374

Testcase 7374 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7375

Testcase 7375 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7376

Testcase 7376 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7377

Testcase 7377 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7378

Testcase 7378 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7379

Testcase 7379 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7380

Testcase 7380 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7381

Testcase 7381 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7382

Testcase 7382 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7383

Testcase 7383 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7384

Testcase 7384 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7385

Testcase 7385 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7386

Testcase 7386 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7387

Testcase 7387 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7388

Testcase 7388 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7389

Testcase 7389 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7390

Testcase 7390 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7391

Testcase 7391 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7392

Testcase 7392 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7393

Testcase 7393 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7394

Testcase 7394 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7395

Testcase 7395 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7396

Testcase 7396 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7397

Testcase 7397 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7398

Testcase 7398 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7399

Testcase 7399 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7400

Testcase 7400 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7401

Testcase 7401 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7402

Testcase 7402 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7403

Testcase 7403 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7404

Testcase 7404 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7405

Testcase 7405 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7406

Testcase 7406 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7407

Testcase 7407 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7408

Testcase 7408 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7409

Testcase 7409 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7410

Testcase 7410 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7411

Testcase 7411 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7412

Testcase 7412 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7413

Testcase 7413 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7414

Testcase 7414 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7415

Testcase 7415 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7416

Testcase 7416 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7417

Testcase 7417 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7418

Testcase 7418 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7419

Testcase 7419 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7420

Testcase 7420 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7421

Testcase 7421 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7422

Testcase 7422 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7423

Testcase 7423 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7424

Testcase 7424 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7425

Testcase 7425 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7426

Testcase 7426 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7427

Testcase 7427 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7428

Testcase 7428 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7429

Testcase 7429 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7430

Testcase 7430 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7431

Testcase 7431 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7432

Testcase 7432 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7433

Testcase 7433 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7434

Testcase 7434 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7435

Testcase 7435 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7436

Testcase 7436 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7437

Testcase 7437 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7438

Testcase 7438 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7439

Testcase 7439 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7440

Testcase 7440 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7441

Testcase 7441 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7442

Testcase 7442 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7443

Testcase 7443 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7444

Testcase 7444 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7445

Testcase 7445 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7446

Testcase 7446 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7447

Testcase 7447 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7448

Testcase 7448 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7449

Testcase 7449 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7450

Testcase 7450 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7451

Testcase 7451 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7452

Testcase 7452 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7453

Testcase 7453 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7454

Testcase 7454 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7455

Testcase 7455 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7456

Testcase 7456 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7457

Testcase 7457 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7458

Testcase 7458 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7459

Testcase 7459 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7460

Testcase 7460 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7461

Testcase 7461 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7462

Testcase 7462 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7463

Testcase 7463 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7464

Testcase 7464 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7465

Testcase 7465 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7466

Testcase 7466 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7467

Testcase 7467 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7468

Testcase 7468 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7469

Testcase 7469 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7470

Testcase 7470 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7471

Testcase 7471 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7472

Testcase 7472 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7473

Testcase 7473 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7474

Testcase 7474 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7475

Testcase 7475 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7476

Testcase 7476 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7477

Testcase 7477 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7478

Testcase 7478 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7479

Testcase 7479 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7480

Testcase 7480 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7481

Testcase 7481 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7482

Testcase 7482 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7483

Testcase 7483 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7484

Testcase 7484 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7485

Testcase 7485 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7486

Testcase 7486 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7487

Testcase 7487 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7488

Testcase 7488 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7489

Testcase 7489 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7490

Testcase 7490 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7491

Testcase 7491 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7492

Testcase 7492 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7493

Testcase 7493 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7494

Testcase 7494 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7495

Testcase 7495 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7496

Testcase 7496 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7497

Testcase 7497 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7498

Testcase 7498 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7499

Testcase 7499 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7500

Testcase 7500 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7501

Testcase 7501 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7502

Testcase 7502 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7503

Testcase 7503 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7504

Testcase 7504 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7505

Testcase 7505 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7506

Testcase 7506 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7507

Testcase 7507 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7508

Testcase 7508 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7509

Testcase 7509 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7510

Testcase 7510 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7511

Testcase 7511 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7512

Testcase 7512 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7513

Testcase 7513 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7514

Testcase 7514 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7515

Testcase 7515 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7516

Testcase 7516 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7517

Testcase 7517 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7518

Testcase 7518 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7519

Testcase 7519 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7520

Testcase 7520 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7521

Testcase 7521 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7522

Testcase 7522 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7523

Testcase 7523 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7524

Testcase 7524 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7525

Testcase 7525 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7526

Testcase 7526 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7527

Testcase 7527 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7528

Testcase 7528 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7529

Testcase 7529 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7530

Testcase 7530 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7531

Testcase 7531 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7532

Testcase 7532 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7533

Testcase 7533 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7534

Testcase 7534 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7535

Testcase 7535 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7536

Testcase 7536 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7537

Testcase 7537 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7538

Testcase 7538 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7539

Testcase 7539 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7540

Testcase 7540 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7541

Testcase 7541 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7542

Testcase 7542 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7543

Testcase 7543 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7544

Testcase 7544 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7545

Testcase 7545 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7546

Testcase 7546 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7547

Testcase 7547 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7548

Testcase 7548 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7549

Testcase 7549 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7550

Testcase 7550 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7551

Testcase 7551 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7552

Testcase 7552 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7553

Testcase 7553 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7554

Testcase 7554 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7555

Testcase 7555 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7556

Testcase 7556 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7557

Testcase 7557 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7558

Testcase 7558 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7559

Testcase 7559 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7560

Testcase 7560 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7561

Testcase 7561 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7562

Testcase 7562 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7563

Testcase 7563 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7564

Testcase 7564 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7565

Testcase 7565 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7566

Testcase 7566 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7567

Testcase 7567 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7568

Testcase 7568 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7569

Testcase 7569 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7570

Testcase 7570 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7571

Testcase 7571 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7572

Testcase 7572 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7573

Testcase 7573 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7574

Testcase 7574 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7575

Testcase 7575 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7576

Testcase 7576 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7577

Testcase 7577 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7578

Testcase 7578 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7579

Testcase 7579 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7580

Testcase 7580 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7581

Testcase 7581 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7582

Testcase 7582 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7583

Testcase 7583 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7584

Testcase 7584 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7585

Testcase 7585 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7586

Testcase 7586 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7587

Testcase 7587 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7588

Testcase 7588 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7589

Testcase 7589 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7590

Testcase 7590 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7591

Testcase 7591 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7592

Testcase 7592 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7593

Testcase 7593 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7594

Testcase 7594 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7595

Testcase 7595 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7596

Testcase 7596 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7597

Testcase 7597 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7598

Testcase 7598 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7599

Testcase 7599 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7600

Testcase 7600 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7601

Testcase 7601 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7602

Testcase 7602 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7603

Testcase 7603 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7604

Testcase 7604 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7605

Testcase 7605 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7606

Testcase 7606 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7607

Testcase 7607 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7608

Testcase 7608 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7609

Testcase 7609 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7610

Testcase 7610 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7611

Testcase 7611 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7612

Testcase 7612 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7613

Testcase 7613 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7614

Testcase 7614 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7615

Testcase 7615 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7616

Testcase 7616 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7617

Testcase 7617 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7618

Testcase 7618 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7619

Testcase 7619 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7620

Testcase 7620 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7621

Testcase 7621 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7622

Testcase 7622 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7623

Testcase 7623 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7624

Testcase 7624 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7625

Testcase 7625 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7626

Testcase 7626 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7627

Testcase 7627 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7628

Testcase 7628 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7629

Testcase 7629 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7630

Testcase 7630 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7631

Testcase 7631 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7632

Testcase 7632 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7633

Testcase 7633 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7634

Testcase 7634 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7635

Testcase 7635 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7636

Testcase 7636 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7637

Testcase 7637 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7638

Testcase 7638 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7639

Testcase 7639 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7640

Testcase 7640 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7641

Testcase 7641 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7642

Testcase 7642 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7643

Testcase 7643 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7644

Testcase 7644 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7645

Testcase 7645 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7646

Testcase 7646 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7647

Testcase 7647 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7648

Testcase 7648 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7649

Testcase 7649 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7650

Testcase 7650 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7651

Testcase 7651 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7652

Testcase 7652 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7653

Testcase 7653 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7654

Testcase 7654 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7655

Testcase 7655 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7656

Testcase 7656 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7657

Testcase 7657 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7658

Testcase 7658 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7659

Testcase 7659 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7660

Testcase 7660 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7661

Testcase 7661 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7662

Testcase 7662 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7663

Testcase 7663 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7664

Testcase 7664 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7665

Testcase 7665 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7666

Testcase 7666 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7667

Testcase 7667 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7668

Testcase 7668 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7669

Testcase 7669 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7670

Testcase 7670 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7671

Testcase 7671 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7672

Testcase 7672 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7673

Testcase 7673 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7674

Testcase 7674 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7675

Testcase 7675 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7676

Testcase 7676 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7677

Testcase 7677 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7678

Testcase 7678 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7679

Testcase 7679 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7680

Testcase 7680 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7681

Testcase 7681 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7682

Testcase 7682 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7683

Testcase 7683 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7684

Testcase 7684 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7685

Testcase 7685 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7686

Testcase 7686 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7687

Testcase 7687 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7688

Testcase 7688 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7689

Testcase 7689 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7690

Testcase 7690 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7691

Testcase 7691 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7692

Testcase 7692 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7693

Testcase 7693 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7694

Testcase 7694 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7695

Testcase 7695 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7696

Testcase 7696 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7697

Testcase 7697 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7698

Testcase 7698 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7699

Testcase 7699 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7700

Testcase 7700 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7701

Testcase 7701 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7702

Testcase 7702 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7703

Testcase 7703 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7704

Testcase 7704 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7705

Testcase 7705 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7706

Testcase 7706 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7707

Testcase 7707 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7708

Testcase 7708 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7709

Testcase 7709 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7710

Testcase 7710 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7711

Testcase 7711 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7712

Testcase 7712 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7713

Testcase 7713 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7714

Testcase 7714 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7715

Testcase 7715 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7716

Testcase 7716 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7717

Testcase 7717 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7718

Testcase 7718 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7719

Testcase 7719 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7720

Testcase 7720 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7721

Testcase 7721 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7722

Testcase 7722 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7723

Testcase 7723 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7724

Testcase 7724 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7725

Testcase 7725 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7726

Testcase 7726 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7727

Testcase 7727 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7728

Testcase 7728 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7729

Testcase 7729 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7730

Testcase 7730 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7731

Testcase 7731 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7732

Testcase 7732 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7733

Testcase 7733 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7734

Testcase 7734 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7735

Testcase 7735 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7736

Testcase 7736 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7737

Testcase 7737 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7738

Testcase 7738 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7739

Testcase 7739 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7740

Testcase 7740 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7741

Testcase 7741 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7742

Testcase 7742 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7743

Testcase 7743 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7744

Testcase 7744 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7745

Testcase 7745 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7746

Testcase 7746 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7747

Testcase 7747 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7748

Testcase 7748 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7749

Testcase 7749 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7750

Testcase 7750 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7751

Testcase 7751 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7752

Testcase 7752 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7753

Testcase 7753 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7754

Testcase 7754 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7755

Testcase 7755 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7756

Testcase 7756 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7757

Testcase 7757 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7758

Testcase 7758 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7759

Testcase 7759 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7760

Testcase 7760 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7761

Testcase 7761 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7762

Testcase 7762 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7763

Testcase 7763 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7764

Testcase 7764 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7765

Testcase 7765 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7766

Testcase 7766 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7767

Testcase 7767 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7768

Testcase 7768 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7769

Testcase 7769 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7770

Testcase 7770 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7771

Testcase 7771 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7772

Testcase 7772 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7773

Testcase 7773 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7774

Testcase 7774 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7775

Testcase 7775 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7776

Testcase 7776 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7777

Testcase 7777 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7778

Testcase 7778 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7779

Testcase 7779 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7780

Testcase 7780 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7781

Testcase 7781 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7782

Testcase 7782 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7783

Testcase 7783 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7784

Testcase 7784 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7785

Testcase 7785 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7786

Testcase 7786 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7787

Testcase 7787 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7788

Testcase 7788 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7789

Testcase 7789 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7790

Testcase 7790 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7791

Testcase 7791 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7792

Testcase 7792 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7793

Testcase 7793 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7794

Testcase 7794 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7795

Testcase 7795 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7796

Testcase 7796 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7797

Testcase 7797 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7798

Testcase 7798 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7799

Testcase 7799 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7800

Testcase 7800 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7801

Testcase 7801 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7802

Testcase 7802 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7803

Testcase 7803 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7804

Testcase 7804 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7805

Testcase 7805 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7806

Testcase 7806 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7807

Testcase 7807 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7808

Testcase 7808 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7809

Testcase 7809 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7810

Testcase 7810 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7811

Testcase 7811 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7812

Testcase 7812 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7813

Testcase 7813 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7814

Testcase 7814 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7815

Testcase 7815 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7816

Testcase 7816 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7817

Testcase 7817 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7818

Testcase 7818 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7819

Testcase 7819 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7820

Testcase 7820 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7821

Testcase 7821 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7822

Testcase 7822 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7823

Testcase 7823 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7824

Testcase 7824 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7825

Testcase 7825 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7826

Testcase 7826 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7827

Testcase 7827 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7828

Testcase 7828 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7829

Testcase 7829 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7830

Testcase 7830 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7831

Testcase 7831 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7832

Testcase 7832 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7833

Testcase 7833 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7834

Testcase 7834 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7835

Testcase 7835 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7836

Testcase 7836 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7837

Testcase 7837 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7838

Testcase 7838 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7839

Testcase 7839 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7840

Testcase 7840 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7841

Testcase 7841 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7842

Testcase 7842 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7843

Testcase 7843 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7844

Testcase 7844 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7845

Testcase 7845 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7846

Testcase 7846 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7847

Testcase 7847 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7848

Testcase 7848 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7849

Testcase 7849 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7850

Testcase 7850 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7851

Testcase 7851 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7852

Testcase 7852 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7853

Testcase 7853 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7854

Testcase 7854 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7855

Testcase 7855 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7856

Testcase 7856 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7857

Testcase 7857 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7858

Testcase 7858 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7859

Testcase 7859 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7860

Testcase 7860 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7861

Testcase 7861 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7862

Testcase 7862 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7863

Testcase 7863 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7864

Testcase 7864 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7865

Testcase 7865 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7866

Testcase 7866 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7867

Testcase 7867 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7868

Testcase 7868 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7869

Testcase 7869 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7870

Testcase 7870 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7871

Testcase 7871 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7872

Testcase 7872 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7873

Testcase 7873 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7874

Testcase 7874 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7875

Testcase 7875 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7876

Testcase 7876 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7877

Testcase 7877 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7878

Testcase 7878 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7879

Testcase 7879 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7880

Testcase 7880 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7881

Testcase 7881 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7882

Testcase 7882 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7883

Testcase 7883 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7884

Testcase 7884 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7885

Testcase 7885 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7886

Testcase 7886 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7887

Testcase 7887 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7888

Testcase 7888 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7889

Testcase 7889 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7890

Testcase 7890 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7891

Testcase 7891 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7892

Testcase 7892 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7893

Testcase 7893 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7894

Testcase 7894 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7895

Testcase 7895 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7896

Testcase 7896 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7897

Testcase 7897 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7898

Testcase 7898 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7899

Testcase 7899 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7900

Testcase 7900 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7901

Testcase 7901 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7902

Testcase 7902 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7903

Testcase 7903 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7904

Testcase 7904 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7905

Testcase 7905 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7906

Testcase 7906 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7907

Testcase 7907 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7908

Testcase 7908 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7909

Testcase 7909 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7910

Testcase 7910 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7911

Testcase 7911 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7912

Testcase 7912 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7913

Testcase 7913 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7914

Testcase 7914 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7915

Testcase 7915 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7916

Testcase 7916 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7917

Testcase 7917 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7918

Testcase 7918 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7919

Testcase 7919 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7920

Testcase 7920 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7921

Testcase 7921 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7922

Testcase 7922 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7923

Testcase 7923 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7924

Testcase 7924 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7925

Testcase 7925 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7926

Testcase 7926 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7927

Testcase 7927 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7928

Testcase 7928 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7929

Testcase 7929 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7930

Testcase 7930 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7931

Testcase 7931 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7932

Testcase 7932 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7933

Testcase 7933 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7934

Testcase 7934 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7935

Testcase 7935 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7936

Testcase 7936 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7937

Testcase 7937 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7938

Testcase 7938 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7939

Testcase 7939 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7940

Testcase 7940 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7941

Testcase 7941 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7942

Testcase 7942 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7943

Testcase 7943 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7944

Testcase 7944 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7945

Testcase 7945 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7946

Testcase 7946 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7947

Testcase 7947 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7948

Testcase 7948 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7949

Testcase 7949 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7950

Testcase 7950 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7951

Testcase 7951 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7952

Testcase 7952 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7953

Testcase 7953 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7954

Testcase 7954 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7955

Testcase 7955 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7956

Testcase 7956 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7957

Testcase 7957 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7958

Testcase 7958 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7959

Testcase 7959 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7960

Testcase 7960 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7961

Testcase 7961 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7962

Testcase 7962 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7963

Testcase 7963 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7964

Testcase 7964 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7965

Testcase 7965 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7966

Testcase 7966 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7967

Testcase 7967 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7968

Testcase 7968 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7969

Testcase 7969 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7970

Testcase 7970 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7971

Testcase 7971 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7972

Testcase 7972 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7973

Testcase 7973 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7974

Testcase 7974 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7975

Testcase 7975 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7976

Testcase 7976 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7977

Testcase 7977 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7978

Testcase 7978 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7979

Testcase 7979 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7980

Testcase 7980 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7981

Testcase 7981 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7982

Testcase 7982 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7983

Testcase 7983 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7984

Testcase 7984 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7985

Testcase 7985 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7986

Testcase 7986 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7987

Testcase 7987 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7988

Testcase 7988 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7989

Testcase 7989 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7990

Testcase 7990 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7991

Testcase 7991 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7992

Testcase 7992 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7993

Testcase 7993 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7994

Testcase 7994 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7995

Testcase 7995 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7996

Testcase 7996 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7997

Testcase 7997 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7998

Testcase 7998 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc7999

Testcase 7999 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8000

Testcase 8000 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8001

Testcase 8001 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8002

Testcase 8002 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8003

Testcase 8003 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8004

Testcase 8004 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8005

Testcase 8005 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8006

Testcase 8006 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8007

Testcase 8007 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8008

Testcase 8008 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8009

Testcase 8009 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8010

Testcase 8010 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8011

Testcase 8011 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8012

Testcase 8012 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8013

Testcase 8013 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8014

Testcase 8014 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8015

Testcase 8015 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8016

Testcase 8016 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8017

Testcase 8017 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8018

Testcase 8018 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8019

Testcase 8019 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8020

Testcase 8020 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8021

Testcase 8021 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8022

Testcase 8022 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8023

Testcase 8023 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8024

Testcase 8024 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8025

Testcase 8025 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8026

Testcase 8026 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8027

Testcase 8027 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8028

Testcase 8028 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8029

Testcase 8029 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8030

Testcase 8030 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8031

Testcase 8031 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8032

Testcase 8032 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8033

Testcase 8033 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8034

Testcase 8034 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8035

Testcase 8035 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8036

Testcase 8036 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8037

Testcase 8037 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8038

Testcase 8038 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8039

Testcase 8039 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8040

Testcase 8040 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8041

Testcase 8041 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8042

Testcase 8042 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8043

Testcase 8043 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8044

Testcase 8044 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8045

Testcase 8045 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8046

Testcase 8046 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8047

Testcase 8047 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8048

Testcase 8048 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8049

Testcase 8049 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8050

Testcase 8050 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8051

Testcase 8051 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8052

Testcase 8052 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8053

Testcase 8053 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8054

Testcase 8054 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8055

Testcase 8055 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8056

Testcase 8056 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8057

Testcase 8057 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8058

Testcase 8058 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8059

Testcase 8059 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8060

Testcase 8060 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8061

Testcase 8061 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8062

Testcase 8062 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8063

Testcase 8063 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8064

Testcase 8064 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8065

Testcase 8065 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8066

Testcase 8066 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8067

Testcase 8067 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8068

Testcase 8068 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8069

Testcase 8069 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8070

Testcase 8070 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8071

Testcase 8071 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8072

Testcase 8072 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8073

Testcase 8073 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8074

Testcase 8074 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8075

Testcase 8075 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8076

Testcase 8076 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8077

Testcase 8077 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8078

Testcase 8078 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8079

Testcase 8079 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8080

Testcase 8080 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8081

Testcase 8081 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8082

Testcase 8082 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8083

Testcase 8083 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8084

Testcase 8084 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8085

Testcase 8085 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8086

Testcase 8086 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8087

Testcase 8087 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8088

Testcase 8088 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8089

Testcase 8089 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8090

Testcase 8090 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8091

Testcase 8091 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8092

Testcase 8092 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8093

Testcase 8093 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8094

Testcase 8094 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8095

Testcase 8095 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8096

Testcase 8096 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8097

Testcase 8097 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8098

Testcase 8098 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8099

Testcase 8099 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8100

Testcase 8100 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8101

Testcase 8101 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8102

Testcase 8102 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8103

Testcase 8103 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8104

Testcase 8104 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8105

Testcase 8105 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8106

Testcase 8106 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: Certificate is missing required extension (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8107

Testcase 8107 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8108

Testcase 8108 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8109

Testcase 8109 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8110

Testcase 8110 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8111

Testcase 8111 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8112

Testcase 8112 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8113

Testcase 8113 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8114

Testcase 8114 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8115

Testcase 8115 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8116

Testcase 8116 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8117

Testcase 8117 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8118

Testcase 8118 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8119

Testcase 8119 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8120

Testcase 8120 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8121

Testcase 8121 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8122

Testcase 8122 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8123

Testcase 8123 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8124

Testcase 8124 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8125

Testcase 8125 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8126

Testcase 8126 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8127

Testcase 8127 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8128

Testcase 8128 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8129

Testcase 8129 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8130

Testcase 8130 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8131

Testcase 8131 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8132

Testcase 8132 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8133

Testcase 8133 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8134

Testcase 8134 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8135

Testcase 8135 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8136

Testcase 8136 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8137

Testcase 8137 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8138

Testcase 8138 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8139

Testcase 8139 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8140

Testcase 8140 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8141

Testcase 8141 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8142

Testcase 8142 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8143

Testcase 8143 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8144

Testcase 8144 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8145

Testcase 8145 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8146

Testcase 8146 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8147

Testcase 8147 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8148

Testcase 8148 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8149

Testcase 8149 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8150

Testcase 8150 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8151

Testcase 8151 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8152

Testcase 8152 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8153

Testcase 8153 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8154

Testcase 8154 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8155

Testcase 8155 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8156

Testcase 8156 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8157

Testcase 8157 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8158

Testcase 8158 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8159

Testcase 8159 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8160

Testcase 8160 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8161

Testcase 8161 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8162

Testcase 8162 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8163

Testcase 8163 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8164

Testcase 8164 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8165

Testcase 8165 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8166

Testcase 8166 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8167

Testcase 8167 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8168

Testcase 8168 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8169

Testcase 8169 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8170

Testcase 8170 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8171

Testcase 8171 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8172

Testcase 8172 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8173

Testcase 8173 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8174

Testcase 8174 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8175

Testcase 8175 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8176

Testcase 8176 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8177

Testcase 8177 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8178

Testcase 8178 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8179

Testcase 8179 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8180

Testcase 8180 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8181

Testcase 8181 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8182

Testcase 8182 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8183

Testcase 8183 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8184

Testcase 8184 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8185

Testcase 8185 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8186

Testcase 8186 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8187

Testcase 8187 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8188

Testcase 8188 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8189

Testcase 8189 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8190

Testcase 8190 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8191

Testcase 8191 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8192

Testcase 8192 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8193

Testcase 8193 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8194

Testcase 8194 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8195

Testcase 8195 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8196

Testcase 8196 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8197

Testcase 8197 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8198

Testcase 8198 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8199

Testcase 8199 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8200

Testcase 8200 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8201

Testcase 8201 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8202

Testcase 8202 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8203

Testcase 8203 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8204

Testcase 8204 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8205

Testcase 8205 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8206

Testcase 8206 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8207

Testcase 8207 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8208

Testcase 8208 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8209

Testcase 8209 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8210

Testcase 8210 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8211

Testcase 8211 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8212

Testcase 8212 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8213

Testcase 8213 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8214

Testcase 8214 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8215

Testcase 8215 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8216

Testcase 8216 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8217

Testcase 8217 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8218

Testcase 8218 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8219

Testcase 8219 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8220

Testcase 8220 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8221

Testcase 8221 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8222

Testcase 8222 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8223

Testcase 8223 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8224

Testcase 8224 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8225

Testcase 8225 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8226

Testcase 8226 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8227

Testcase 8227 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8228

Testcase 8228 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8229

Testcase 8229 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8230

Testcase 8230 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8231

Testcase 8231 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8232

Testcase 8232 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8233

Testcase 8233 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8234

Testcase 8234 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8235

Testcase 8235 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8236

Testcase 8236 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8237

Testcase 8237 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8238

Testcase 8238 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8239

Testcase 8239 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8240

Testcase 8240 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8241

Testcase 8241 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8242

Testcase 8242 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8243

Testcase 8243 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8244

Testcase 8244 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8245

Testcase 8245 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8246

Testcase 8246 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8247

Testcase 8247 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8248

Testcase 8248 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8249

Testcase 8249 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8250

Testcase 8250 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8251

Testcase 8251 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8252

Testcase 8252 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8253

Testcase 8253 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8254

Testcase 8254 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8255

Testcase 8255 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8256

Testcase 8256 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8257

Testcase 8257 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8258

Testcase 8258 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8259

Testcase 8259 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8260

Testcase 8260 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8261

Testcase 8261 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8262

Testcase 8262 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8263

Testcase 8263 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8264

Testcase 8264 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8265

Testcase 8265 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8266

Testcase 8266 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8267

Testcase 8267 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8268

Testcase 8268 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8269

Testcase 8269 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8270

Testcase 8270 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8271

Testcase 8271 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8272

Testcase 8272 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8273

Testcase 8273 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8274

Testcase 8274 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8275

Testcase 8275 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8276

Testcase 8276 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8277

Testcase 8277 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8278

Testcase 8278 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8279

Testcase 8279 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8280

Testcase 8280 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8281

Testcase 8281 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8282

Testcase 8282 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8283

Testcase 8283 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8284

Testcase 8284 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8285

Testcase 8285 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8286

Testcase 8286 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8287

Testcase 8287 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8288

Testcase 8288 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8289

Testcase 8289 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8290

Testcase 8290 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8291

Testcase 8291 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8292

Testcase 8292 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8293

Testcase 8293 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8294

Testcase 8294 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8295

Testcase 8295 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8296

Testcase 8296 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8297

Testcase 8297 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8298

Testcase 8298 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8299

Testcase 8299 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8300

Testcase 8300 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8301

Testcase 8301 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8302

Testcase 8302 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8303

Testcase 8303 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8304

Testcase 8304 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8305

Testcase 8305 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8306

Testcase 8306 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8307

Testcase 8307 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8308

Testcase 8308 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8309

Testcase 8309 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8310

Testcase 8310 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8311

Testcase 8311 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8312

Testcase 8312 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8313

Testcase 8313 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8314

Testcase 8314 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8315

Testcase 8315 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8316

Testcase 8316 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8317

Testcase 8317 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8318

Testcase 8318 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8319

Testcase 8319 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8320

Testcase 8320 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8321

Testcase 8321 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8322

Testcase 8322 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8323

Testcase 8323 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8324

Testcase 8324 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8325

Testcase 8325 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8326

Testcase 8326 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8327

Testcase 8327 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8328

Testcase 8328 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8329

Testcase 8329 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8330

Testcase 8330 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8331

Testcase 8331 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8332

Testcase 8332 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8333

Testcase 8333 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8334

Testcase 8334 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8335

Testcase 8335 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8336

Testcase 8336 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8337

Testcase 8337 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8338

Testcase 8338 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8339

Testcase 8339 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8340

Testcase 8340 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8341

Testcase 8341 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8342

Testcase 8342 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8343

Testcase 8343 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8344

Testcase 8344 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8345

Testcase 8345 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8346

Testcase 8346 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8347

Testcase 8347 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8348

Testcase 8348 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8349

Testcase 8349 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8350

Testcase 8350 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8351

Testcase 8351 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8352

Testcase 8352 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8353

Testcase 8353 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8354

Testcase 8354 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8355

Testcase 8355 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8356

Testcase 8356 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8357

Testcase 8357 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8358

Testcase 8358 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8359

Testcase 8359 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8360

Testcase 8360 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8361

Testcase 8361 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8362

Testcase 8362 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8363

Testcase 8363 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8364

Testcase 8364 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8365

Testcase 8365 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8366

Testcase 8366 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8367

Testcase 8367 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8368

Testcase 8368 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8369

Testcase 8369 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8370

Testcase 8370 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8371

Testcase 8371 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8372

Testcase 8372 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8373

Testcase 8373 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8374

Testcase 8374 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8375

Testcase 8375 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8376

Testcase 8376 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8377

Testcase 8377 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8378

Testcase 8378 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8379

Testcase 8379 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8380

Testcase 8380 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8381

Testcase 8381 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8382

Testcase 8382 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8383

Testcase 8383 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8384

Testcase 8384 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8385

Testcase 8385 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8386

Testcase 8386 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8387

Testcase 8387 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8388

Testcase 8388 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8389

Testcase 8389 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8390

Testcase 8390 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8391

Testcase 8391 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8392

Testcase 8392 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8393

Testcase 8393 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8394

Testcase 8394 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8395

Testcase 8395 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8396

Testcase 8396 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8397

Testcase 8397 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8398

Testcase 8398 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8399

Testcase 8399 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8400

Testcase 8400 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8401

Testcase 8401 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8402

Testcase 8402 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8403

Testcase 8403 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8404

Testcase 8404 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8405

Testcase 8405 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8406

Testcase 8406 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8407

Testcase 8407 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8408

Testcase 8408 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8409

Testcase 8409 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8410

Testcase 8410 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8411

Testcase 8411 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8412

Testcase 8412 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8413

Testcase 8413 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8414

Testcase 8414 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8415

Testcase 8415 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8416

Testcase 8416 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8417

Testcase 8417 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8418

Testcase 8418 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8419

Testcase 8419 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8420

Testcase 8420 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8421

Testcase 8421 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8422

Testcase 8422 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8423

Testcase 8423 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8424

Testcase 8424 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8425

Testcase 8425 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8426

Testcase 8426 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8427

Testcase 8427 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8428

Testcase 8428 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8429

Testcase 8429 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8430

Testcase 8430 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8431

Testcase 8431 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8432

Testcase 8432 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8433

Testcase 8433 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8434

Testcase 8434 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8435

Testcase 8435 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8436

Testcase 8436 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8437

Testcase 8437 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8438

Testcase 8438 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8439

Testcase 8439 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8440

Testcase 8440 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8441

Testcase 8441 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8442

Testcase 8442 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8443

Testcase 8443 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8444

Testcase 8444 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8445

Testcase 8445 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8446

Testcase 8446 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8447

Testcase 8447 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8448

Testcase 8448 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8449

Testcase 8449 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8450

Testcase 8450 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8451

Testcase 8451 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8452

Testcase 8452 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8453

Testcase 8453 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8454

Testcase 8454 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8455

Testcase 8455 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8456

Testcase 8456 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8457

Testcase 8457 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8458

Testcase 8458 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8459

Testcase 8459 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8460

Testcase 8460 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8461

Testcase 8461 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8462

Testcase 8462 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8463

Testcase 8463 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8464

Testcase 8464 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8465

Testcase 8465 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8466

Testcase 8466 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8467

Testcase 8467 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8468

Testcase 8468 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8469

Testcase 8469 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8470

Testcase 8470 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8471

Testcase 8471 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8472

Testcase 8472 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8473

Testcase 8473 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8474

Testcase 8474 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8475

Testcase 8475 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8476

Testcase 8476 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8477

Testcase 8477 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8478

Testcase 8478 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8479

Testcase 8479 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8480

Testcase 8480 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8481

Testcase 8481 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8482

Testcase 8482 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8483

Testcase 8483 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8484

Testcase 8484 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8485

Testcase 8485 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8486

Testcase 8486 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8487

Testcase 8487 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8488

Testcase 8488 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8489

Testcase 8489 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8490

Testcase 8490 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8491

Testcase 8491 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8492

Testcase 8492 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8493

Testcase 8493 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8494

Testcase 8494 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8495

Testcase 8495 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8496

Testcase 8496 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8497

Testcase 8497 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8498

Testcase 8498 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8499

Testcase 8499 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8500

Testcase 8500 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8501

Testcase 8501 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8502

Testcase 8502 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8503

Testcase 8503 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8504

Testcase 8504 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8505

Testcase 8505 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8506

Testcase 8506 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8507

Testcase 8507 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8508

Testcase 8508 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8509

Testcase 8509 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8510

Testcase 8510 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8511

Testcase 8511 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8512

Testcase 8512 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8513

Testcase 8513 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8514

Testcase 8514 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8515

Testcase 8515 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8516

Testcase 8516 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8517

Testcase 8517 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8518

Testcase 8518 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8519

Testcase 8519 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8520

Testcase 8520 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8521

Testcase 8521 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8522

Testcase 8522 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8523

Testcase 8523 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8524

Testcase 8524 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8525

Testcase 8525 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8526

Testcase 8526 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8527

Testcase 8527 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8528

Testcase 8528 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8529

Testcase 8529 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8530

Testcase 8530 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8531

Testcase 8531 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8532

Testcase 8532 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8533

Testcase 8533 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8534

Testcase 8534 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8535

Testcase 8535 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8536

Testcase 8536 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8537

Testcase 8537 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8538

Testcase 8538 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8539

Testcase 8539 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8540

Testcase 8540 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8541

Testcase 8541 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8542

Testcase 8542 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8543

Testcase 8543 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8544

Testcase 8544 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8545

Testcase 8545 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8546

Testcase 8546 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8547

Testcase 8547 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8548

Testcase 8548 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8549

Testcase 8549 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8550

Testcase 8550 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8551

Testcase 8551 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8552

Testcase 8552 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8553

Testcase 8553 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8554

Testcase 8554 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8555

Testcase 8555 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8556

Testcase 8556 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8557

Testcase 8557 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8558

Testcase 8558 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8559

Testcase 8559 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8560

Testcase 8560 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8561

Testcase 8561 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8562

Testcase 8562 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8563

Testcase 8563 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8564

Testcase 8564 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8565

Testcase 8565 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8566

Testcase 8566 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8567

Testcase 8567 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8568

Testcase 8568 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8569

Testcase 8569 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8570

Testcase 8570 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8571

Testcase 8571 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8572

Testcase 8572 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8573

Testcase 8573 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8574

Testcase 8574 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8575

Testcase 8575 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8576

Testcase 8576 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8577

Testcase 8577 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8578

Testcase 8578 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8579

Testcase 8579 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8580

Testcase 8580 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8581

Testcase 8581 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8582

Testcase 8582 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8583

Testcase 8583 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8584

Testcase 8584 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8585

Testcase 8585 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8586

Testcase 8586 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8587

Testcase 8587 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8588

Testcase 8588 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8589

Testcase 8589 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8590

Testcase 8590 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8591

Testcase 8591 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8592

Testcase 8592 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8593

Testcase 8593 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8594

Testcase 8594 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8595

Testcase 8595 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8596

Testcase 8596 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8597

Testcase 8597 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8598

Testcase 8598 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8599

Testcase 8599 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8600

Testcase 8600 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8601

Testcase 8601 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8602

Testcase 8602 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8603

Testcase 8603 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8604

Testcase 8604 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8605

Testcase 8605 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8606

Testcase 8606 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8607

Testcase 8607 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8608

Testcase 8608 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8609

Testcase 8609 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8610

Testcase 8610 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8611

Testcase 8611 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8612

Testcase 8612 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8613

Testcase 8613 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8614

Testcase 8614 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8615

Testcase 8615 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8616

Testcase 8616 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8617

Testcase 8617 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8618

Testcase 8618 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8619

Testcase 8619 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8620

Testcase 8620 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8621

Testcase 8621 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8622

Testcase 8622 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8623

Testcase 8623 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8624

Testcase 8624 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8625

Testcase 8625 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8626

Testcase 8626 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8627

Testcase 8627 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8628

Testcase 8628 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8629

Testcase 8629 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8630

Testcase 8630 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8631

Testcase 8631 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8632

Testcase 8632 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8633

Testcase 8633 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8634

Testcase 8634 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8635

Testcase 8635 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8636

Testcase 8636 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8637

Testcase 8637 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8638

Testcase 8638 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8639

Testcase 8639 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8640

Testcase 8640 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8641

Testcase 8641 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8642

Testcase 8642 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8643

Testcase 8643 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8644

Testcase 8644 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8645

Testcase 8645 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8646

Testcase 8646 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8647

Testcase 8647 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8648

Testcase 8648 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8649

Testcase 8649 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8650

Testcase 8650 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8651

Testcase 8651 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8652

Testcase 8652 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8653

Testcase 8653 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8654

Testcase 8654 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8655

Testcase 8655 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8656

Testcase 8656 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8657

Testcase 8657 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8658

Testcase 8658 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8659

Testcase 8659 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8660

Testcase 8660 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8661

Testcase 8661 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8662

Testcase 8662 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8663

Testcase 8663 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8664

Testcase 8664 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8665

Testcase 8665 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8666

Testcase 8666 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8667

Testcase 8667 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8668

Testcase 8668 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8669

Testcase 8669 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8670

Testcase 8670 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8671

Testcase 8671 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8672

Testcase 8672 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8673

Testcase 8673 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8674

Testcase 8674 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	🚧	implementation requires DNS peer names
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8675

Testcase 8675 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8676

Testcase 8676 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8677

Testcase 8677 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8678

Testcase 8678 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8679

Testcase 8679 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8680

Testcase 8680 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8681

Testcase 8681 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8682

Testcase 8682 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8683

Testcase 8683 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8684

Testcase 8684 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8685

Testcase 8685 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8686

Testcase 8686 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8687

Testcase 8687 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8688

Testcase 8688 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8689

Testcase 8689 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8690

Testcase 8690 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8691

Testcase 8691 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8692

Testcase 8692 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8693

Testcase 8693 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8694

Testcase 8694 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8695

Testcase 8695 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8696

Testcase 8696 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8697

Testcase 8697 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8698

Testcase 8698 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8699

Testcase 8699 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8700

Testcase 8700 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8701

Testcase 8701 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8702

Testcase 8702 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8703

Testcase 8703 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8704

Testcase 8704 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8705

Testcase 8705 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8706

Testcase 8706 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8707

Testcase 8707 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8708

Testcase 8708 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8709

Testcase 8709 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8710

Testcase 8710 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8711

Testcase 8711 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8712

Testcase 8712 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8713

Testcase 8713 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8714

Testcase 8714 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8715

Testcase 8715 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8716

Testcase 8716 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8717

Testcase 8717 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8718

Testcase 8718 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8719

Testcase 8719 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8720

Testcase 8720 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8721

Testcase 8721 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8722

Testcase 8722 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8723

Testcase 8723 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8724

Testcase 8724 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8725

Testcase 8725 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8726

Testcase 8726 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8727

Testcase 8727 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8728

Testcase 8728 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8729

Testcase 8729 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8730

Testcase 8730 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8731

Testcase 8731 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8732

Testcase 8732 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8733

Testcase 8733 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8734

Testcase 8734 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8735

Testcase 8735 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8736

Testcase 8736 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8737

Testcase 8737 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8738

Testcase 8738 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8739

Testcase 8739 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8740

Testcase 8740 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8741

Testcase 8741 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8742

Testcase 8742 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8743

Testcase 8743 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8744

Testcase 8744 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8745

Testcase 8745 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8746

Testcase 8746 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8747

Testcase 8747 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8748

Testcase 8748 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8749

Testcase 8749 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8750

Testcase 8750 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8751

Testcase 8751 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8752

Testcase 8752 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8753

Testcase 8753 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8754

Testcase 8754 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8755

Testcase 8755 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8756

Testcase 8756 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8757

Testcase 8757 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8758

Testcase 8758 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8759

Testcase 8759 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8760

Testcase 8760 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8761

Testcase 8761 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8762

Testcase 8762 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8763

Testcase 8763 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8764

Testcase 8764 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8765

Testcase 8765 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8766

Testcase 8766 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8767

Testcase 8767 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8768

Testcase 8768 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8769

Testcase 8769 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8770

Testcase 8770 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8771

Testcase 8771 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8772

Testcase 8772 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8773

Testcase 8773 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8774

Testcase 8774 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8775

Testcase 8775 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8776

Testcase 8776 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8777

Testcase 8777 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8778

Testcase 8778 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8779

Testcase 8779 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8780

Testcase 8780 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8781

Testcase 8781 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8782

Testcase 8782 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8783

Testcase 8783 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8784

Testcase 8784 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8785

Testcase 8785 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8786

Testcase 8786 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8787

Testcase 8787 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8788

Testcase 8788 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8789

Testcase 8789 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8790

Testcase 8790 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8791

Testcase 8791 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8792

Testcase 8792 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8793

Testcase 8793 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8794

Testcase 8794 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8795

Testcase 8795 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8796

Testcase 8796 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8797

Testcase 8797 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8798

Testcase 8798 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8799

Testcase 8799 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8800

Testcase 8800 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8801

Testcase 8801 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8802

Testcase 8802 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8803

Testcase 8803 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8804

Testcase 8804 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8805

Testcase 8805 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8806

Testcase 8806 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8807

Testcase 8807 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8808

Testcase 8808 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8809

Testcase 8809 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8810

Testcase 8810 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8811

Testcase 8811 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8812

Testcase 8812 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8813

Testcase 8813 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8814

Testcase 8814 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8815

Testcase 8815 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8816

Testcase 8816 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8817

Testcase 8817 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8818

Testcase 8818 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8819

Testcase 8819 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8820

Testcase 8820 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8821

Testcase 8821 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8822

Testcase 8822 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8823

Testcase 8823 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8824

Testcase 8824 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8825

Testcase 8825 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8826

Testcase 8826 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8827

Testcase 8827 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8828

Testcase 8828 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8829

Testcase 8829 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8830

Testcase 8830 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8831

Testcase 8831 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8832

Testcase 8832 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8833

Testcase 8833 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8834

Testcase 8834 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8835

Testcase 8835 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8836

Testcase 8836 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8837

Testcase 8837 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8838

Testcase 8838 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8839

Testcase 8839 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8840

Testcase 8840 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8841

Testcase 8841 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8842

Testcase 8842 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8843

Testcase 8843 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8844

Testcase 8844 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8845

Testcase 8845 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8846

Testcase 8846 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8847

Testcase 8847 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8848

Testcase 8848 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8849

Testcase 8849 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8850

Testcase 8850 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8851

Testcase 8851 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8852

Testcase 8852 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8853

Testcase 8853 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8854

Testcase 8854 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8855

Testcase 8855 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8856

Testcase 8856 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8857

Testcase 8857 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8858

Testcase 8858 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8859

Testcase 8859 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8860

Testcase 8860 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8861

Testcase 8861 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8862

Testcase 8862 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8863

Testcase 8863 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8864

Testcase 8864 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	excluded subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: excluded name constraint matched SAN
openssl-1.1	✅	excluded subtree violation
openssl-3.4.1	✅	excluded subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	excluded subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	excluded subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8865

Testcase 8865 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8866

Testcase 8866 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8867

Testcase 8867 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8868

Testcase 8868 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8869

Testcase 8869 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8870

Testcase 8870 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8871

Testcase 8871 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8872

Testcase 8872 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8873

Testcase 8873 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8874

Testcase 8874 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8875

Testcase 8875 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8876

Testcase 8876 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8877

Testcase 8877 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8878

Testcase 8878 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8879

Testcase 8879 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8880

Testcase 8880 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	IP address mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	IP address mismatch
openssl-3.4.1	✅	IP address mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	IP address mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	IP address mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8881

Testcase 8881 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8882

Testcase 8882 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8883

Testcase 8883 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8884

Testcase 8884 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8885

Testcase 8885 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8886

Testcase 8886 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8887

Testcase 8887 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8888

Testcase 8888 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8889

Testcase 8889 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8890

Testcase 8890 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8891

Testcase 8891 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8892

Testcase 8892 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8893

Testcase 8893 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8894

Testcase 8894 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8895

Testcase 8895 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8896

Testcase 8896 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8897

Testcase 8897 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8898

Testcase 8898 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8899

Testcase 8899 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8900

Testcase 8900 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8901

Testcase 8901 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8902

Testcase 8902 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8903

Testcase 8903 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8904

Testcase 8904 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8905

Testcase 8905 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8906

Testcase 8906 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8907

Testcase 8907 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8908

Testcase 8908 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8909

Testcase 8909 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8910

Testcase 8910 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8911

Testcase 8911 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8912

Testcase 8912 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8913

Testcase 8913 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8914

Testcase 8914 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8915

Testcase 8915 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8916

Testcase 8916 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8917

Testcase 8917 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8918

Testcase 8918 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8919

Testcase 8919 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8920

Testcase 8920 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8921

Testcase 8921 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8922

Testcase 8922 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8923

Testcase 8923 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8924

Testcase 8924 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8925

Testcase 8925 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8926

Testcase 8926 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8927

Testcase 8927 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8928

Testcase 8928 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8929

Testcase 8929 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8930

Testcase 8930 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8931

Testcase 8931 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8932

Testcase 8932 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8933

Testcase 8933 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8934

Testcase 8934 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8935

Testcase 8935 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8936

Testcase 8936 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8937

Testcase 8937 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8938

Testcase 8938 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8939

Testcase 8939 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8940

Testcase 8940 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8941

Testcase 8941 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8942

Testcase 8942 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8943

Testcase 8943 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8944

Testcase 8944 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8945

Testcase 8945 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8946

Testcase 8946 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8947

Testcase 8947 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8948

Testcase 8948 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8949

Testcase 8949 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8950

Testcase 8950 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8951

Testcase 8951 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8952

Testcase 8952 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8953

Testcase 8953 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8954

Testcase 8954 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8955

Testcase 8955 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8956

Testcase 8956 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8957

Testcase 8957 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8958

Testcase 8958 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8959

Testcase 8959 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8960

Testcase 8960 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8961

Testcase 8961 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8962

Testcase 8962 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8963

Testcase 8963 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8964

Testcase 8964 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8965

Testcase 8965 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8966

Testcase 8966 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8967

Testcase 8967 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8968

Testcase 8968 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8969

Testcase 8969 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8970

Testcase 8970 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8971

Testcase 8971 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8972

Testcase 8972 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8973

Testcase 8973 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8974

Testcase 8974 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8975

Testcase 8975 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8976

Testcase 8976 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8977

Testcase 8977 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8978

Testcase 8978 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8979

Testcase 8979 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8980

Testcase 8980 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8981

Testcase 8981 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8982

Testcase 8982 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8983

Testcase 8983 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8984

Testcase 8984 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8985

Testcase 8985 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8986

Testcase 8986 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8987

Testcase 8987 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8988

Testcase 8988 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8989

Testcase 8989 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8990

Testcase 8990 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8991

Testcase 8991 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8992

Testcase 8992 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8993

Testcase 8993 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8994

Testcase 8994 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8995

Testcase 8995 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8996

Testcase 8996 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8997

Testcase 8997 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8998

Testcase 8998 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc8999

Testcase 8999 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9000

Testcase 9000 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9001

Testcase 9001 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9002

Testcase 9002 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9003

Testcase 9003 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9004

Testcase 9004 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9005

Testcase 9005 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9006

Testcase 9006 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9007

Testcase 9007 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9008

Testcase 9008 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9009

Testcase 9009 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9010

Testcase 9010 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9011

Testcase 9011 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9012

Testcase 9012 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9013

Testcase 9013 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9014

Testcase 9014 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9015

Testcase 9015 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9016

Testcase 9016 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9017

Testcase 9017 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9018

Testcase 9018 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9019

Testcase 9019 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9020

Testcase 9020 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9021

Testcase 9021 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9022

Testcase 9022 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9023

Testcase 9023 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9024

Testcase 9024 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9025

Testcase 9025 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9026

Testcase 9026 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9027

Testcase 9027 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9028

Testcase 9028 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9029

Testcase 9029 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9030

Testcase 9030 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9031

Testcase 9031 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9032

Testcase 9032 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9033

Testcase 9033 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9034

Testcase 9034 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9035

Testcase 9035 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9036

Testcase 9036 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9037

Testcase 9037 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9038

Testcase 9038 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9039

Testcase 9039 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9040

Testcase 9040 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9041

Testcase 9041 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9042

Testcase 9042 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9043

Testcase 9043 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9044

Testcase 9044 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9045

Testcase 9045 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9046

Testcase 9046 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9047

Testcase 9047 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9048

Testcase 9048 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9049

Testcase 9049 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9050

Testcase 9050 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9051

Testcase 9051 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9052

Testcase 9052 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9053

Testcase 9053 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9054

Testcase 9054 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9055

Testcase 9055 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9056

Testcase 9056 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9057

Testcase 9057 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9058

Testcase 9058 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9059

Testcase 9059 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9060

Testcase 9060 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9061

Testcase 9061 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9062

Testcase 9062 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9063

Testcase 9063 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9064

Testcase 9064 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9065

Testcase 9065 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9066

Testcase 9066 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9067

Testcase 9067 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9068

Testcase 9068 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9069

Testcase 9069 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9070

Testcase 9070 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9071

Testcase 9071 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9072

Testcase 9072 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9073

Testcase 9073 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9074

Testcase 9074 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9075

Testcase 9075 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9076

Testcase 9076 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9077

Testcase 9077 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9078

Testcase 9078 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9079

Testcase 9079 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9080

Testcase 9080 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9081

Testcase 9081 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9082

Testcase 9082 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9083

Testcase 9083 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9084

Testcase 9084 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9085

Testcase 9085 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9086

Testcase 9086 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9087

Testcase 9087 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9088

Testcase 9088 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9089

Testcase 9089 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9090

Testcase 9090 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9091

Testcase 9091 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9092

Testcase 9092 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9093

Testcase 9093 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9094

Testcase 9094 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9095

Testcase 9095 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9096

Testcase 9096 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9097

Testcase 9097 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9098

Testcase 9098 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9099

Testcase 9099 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9100

Testcase 9100 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9101

Testcase 9101 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9102

Testcase 9102 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9103

Testcase 9103 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9104

Testcase 9104 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9105

Testcase 9105 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9106

Testcase 9106 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9107

Testcase 9107 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9108

Testcase 9108 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9109

Testcase 9109 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9110

Testcase 9110 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9111

Testcase 9111 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9112

Testcase 9112 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9113

Testcase 9113 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9114

Testcase 9114 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9115

Testcase 9115 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9116

Testcase 9116 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9117

Testcase 9117 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9118

Testcase 9118 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9119

Testcase 9119 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9120

Testcase 9120 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9121

Testcase 9121 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9122

Testcase 9122 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9123

Testcase 9123 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9124

Testcase 9124 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9125

Testcase 9125 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9126

Testcase 9126 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9127

Testcase 9127 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9128

Testcase 9128 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9129

Testcase 9129 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9130

Testcase 9130 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9131

Testcase 9131 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9132

Testcase 9132 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9133

Testcase 9133 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9134

Testcase 9134 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9135

Testcase 9135 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9136

Testcase 9136 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9137

Testcase 9137 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9138

Testcase 9138 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9139

Testcase 9139 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9140

Testcase 9140 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9141

Testcase 9141 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9142

Testcase 9142 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9143

Testcase 9143 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9144

Testcase 9144 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9145

Testcase 9145 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9146

Testcase 9146 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9147

Testcase 9147 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9148

Testcase 9148 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9149

Testcase 9149 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9150

Testcase 9150 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9151

Testcase 9151 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9152

Testcase 9152 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9153

Testcase 9153 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9154

Testcase 9154 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9155

Testcase 9155 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9156

Testcase 9156 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9157

Testcase 9157 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9158

Testcase 9158 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9159

Testcase 9159 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9160

Testcase 9160 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9161

Testcase 9161 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9162

Testcase 9162 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9163

Testcase 9163 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9164

Testcase 9164 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9165

Testcase 9165 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9166

Testcase 9166 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9167

Testcase 9167 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9168

Testcase 9168 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9169

Testcase 9169 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9170

Testcase 9170 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9171

Testcase 9171 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9172

Testcase 9172 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9173

Testcase 9173 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9174

Testcase 9174 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9175

Testcase 9175 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9176

Testcase 9176 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9177

Testcase 9177 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9178

Testcase 9178 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9179

Testcase 9179 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9180

Testcase 9180 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9181

Testcase 9181 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9182

Testcase 9182 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9183

Testcase 9183 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9184

Testcase 9184 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9185

Testcase 9185 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9186

Testcase 9186 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9187

Testcase 9187 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9188

Testcase 9188 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9189

Testcase 9189 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9190

Testcase 9190 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9191

Testcase 9191 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9192

Testcase 9192 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9193

Testcase 9193 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9194

Testcase 9194 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9195

Testcase 9195 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9196

Testcase 9196 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9197

Testcase 9197 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9198

Testcase 9198 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9199

Testcase 9199 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9200

Testcase 9200 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9201

Testcase 9201 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9202

Testcase 9202 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9203

Testcase 9203 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9204

Testcase 9204 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9205

Testcase 9205 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9206

Testcase 9206 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9207

Testcase 9207 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9208

Testcase 9208 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9209

Testcase 9209 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9210

Testcase 9210 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9211

Testcase 9211 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9212

Testcase 9212 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9213

Testcase 9213 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9214

Testcase 9214 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9215

Testcase 9215 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9216

Testcase 9216 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9217

Testcase 9217 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9218

Testcase 9218 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9219

Testcase 9219 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9220

Testcase 9220 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9221

Testcase 9221 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9222

Testcase 9222 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9223

Testcase 9223 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9224

Testcase 9224 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9225

Testcase 9225 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9226

Testcase 9226 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9227

Testcase 9227 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9228

Testcase 9228 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9229

Testcase 9229 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9230

Testcase 9230 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9231

Testcase 9231 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9232

Testcase 9232 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9233

Testcase 9233 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9234

Testcase 9234 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9235

Testcase 9235 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9236

Testcase 9236 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9237

Testcase 9237 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9238

Testcase 9238 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9239

Testcase 9239 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9240

Testcase 9240 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9241

Testcase 9241 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9242

Testcase 9242 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9243

Testcase 9243 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9244

Testcase 9244 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9245

Testcase 9245 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9246

Testcase 9246 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9247

Testcase 9247 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9248

Testcase 9248 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9249

Testcase 9249 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9250

Testcase 9250 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9251

Testcase 9251 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9252

Testcase 9252 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9253

Testcase 9253 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9254

Testcase 9254 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9255

Testcase 9255 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9256

Testcase 9256 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9257

Testcase 9257 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9258

Testcase 9258 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9259

Testcase 9259 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9260

Testcase 9260 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9261

Testcase 9261 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9262

Testcase 9262 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9263

Testcase 9263 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9264

Testcase 9264 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9265

Testcase 9265 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9266

Testcase 9266 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9267

Testcase 9267 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9268

Testcase 9268 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9269

Testcase 9269 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9270

Testcase 9270 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9271

Testcase 9271 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9272

Testcase 9272 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9273

Testcase 9273 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9274

Testcase 9274 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9275

Testcase 9275 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9276

Testcase 9276 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9277

Testcase 9277 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9278

Testcase 9278 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9279

Testcase 9279 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9280

Testcase 9280 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9281

Testcase 9281 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9282

Testcase 9282 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9283

Testcase 9283 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9284

Testcase 9284 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9285

Testcase 9285 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9286

Testcase 9286 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9287

Testcase 9287 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9288

Testcase 9288 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9289

Testcase 9289 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9290

Testcase 9290 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9291

Testcase 9291 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9292

Testcase 9292 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9293

Testcase 9293 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9294

Testcase 9294 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9295

Testcase 9295 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9296

Testcase 9296 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9297

Testcase 9297 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9298

Testcase 9298 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9299

Testcase 9299 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9300

Testcase 9300 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9301

Testcase 9301 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9302

Testcase 9302 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9303

Testcase 9303 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9304

Testcase 9304 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9305

Testcase 9305 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9306

Testcase 9306 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9307

Testcase 9307 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9308

Testcase 9308 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9309

Testcase 9309 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9310

Testcase 9310 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9311

Testcase 9311 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9312

Testcase 9312 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9313

Testcase 9313 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9314

Testcase 9314 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9315

Testcase 9315 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9316

Testcase 9316 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9317

Testcase 9317 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9318

Testcase 9318 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9319

Testcase 9319 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9320

Testcase 9320 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9321

Testcase 9321 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9322

Testcase 9322 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9323

Testcase 9323 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9324

Testcase 9324 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9325

Testcase 9325 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9326

Testcase 9326 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9327

Testcase 9327 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9328

Testcase 9328 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9329

Testcase 9329 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9330

Testcase 9330 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9331

Testcase 9331 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9332

Testcase 9332 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9333

Testcase 9333 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9334

Testcase 9334 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9335

Testcase 9335 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9336

Testcase 9336 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9337

Testcase 9337 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9338

Testcase 9338 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9339

Testcase 9339 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9340

Testcase 9340 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9341

Testcase 9341 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9342

Testcase 9342 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9343

Testcase 9343 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9344

Testcase 9344 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9345

Testcase 9345 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9346

Testcase 9346 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9347

Testcase 9347 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9348

Testcase 9348 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9349

Testcase 9349 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9350

Testcase 9350 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9351

Testcase 9351 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9352

Testcase 9352 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9353

Testcase 9353 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9354

Testcase 9354 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9355

Testcase 9355 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9356

Testcase 9356 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9357

Testcase 9357 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9358

Testcase 9358 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9359

Testcase 9359 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9360

Testcase 9360 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9361

Testcase 9361 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9362

Testcase 9362 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9363

Testcase 9363 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9364

Testcase 9364 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9365

Testcase 9365 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9366

Testcase 9366 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9367

Testcase 9367 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9368

Testcase 9368 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9369

Testcase 9369 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9370

Testcase 9370 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9371

Testcase 9371 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9372

Testcase 9372 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9373

Testcase 9373 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9374

Testcase 9374 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9375

Testcase 9375 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9376

Testcase 9376 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9377

Testcase 9377 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9378

Testcase 9378 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9379

Testcase 9379 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9380

Testcase 9380 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9381

Testcase 9381 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9382

Testcase 9382 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9383

Testcase 9383 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9384

Testcase 9384 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9385

Testcase 9385 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9386

Testcase 9386 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9387

Testcase 9387 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9388

Testcase 9388 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9389

Testcase 9389 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9390

Testcase 9390 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9391

Testcase 9391 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9392

Testcase 9392 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9393

Testcase 9393 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9394

Testcase 9394 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9395

Testcase 9395 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9396

Testcase 9396 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9397

Testcase 9397 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9398

Testcase 9398 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9399

Testcase 9399 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9400

Testcase 9400 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9401

Testcase 9401 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9402

Testcase 9402 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9403

Testcase 9403 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9404

Testcase 9404 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9405

Testcase 9405 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9406

Testcase 9406 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9407

Testcase 9407 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9408

Testcase 9408 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9409

Testcase 9409 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9410

Testcase 9410 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9411

Testcase 9411 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9412

Testcase 9412 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9413

Testcase 9413 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9414

Testcase 9414 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9415

Testcase 9415 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9416

Testcase 9416 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9417

Testcase 9417 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9418

Testcase 9418 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9419

Testcase 9419 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9420

Testcase 9420 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9421

Testcase 9421 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9422

Testcase 9422 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9423

Testcase 9423 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9424

Testcase 9424 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9425

Testcase 9425 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9426

Testcase 9426 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9427

Testcase 9427 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9428

Testcase 9428 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9429

Testcase 9429 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9430

Testcase 9430 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9431

Testcase 9431 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9432

Testcase 9432 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9433

Testcase 9433 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9434

Testcase 9434 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9435

Testcase 9435 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9436

Testcase 9436 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9437

Testcase 9437 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9438

Testcase 9438 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9439

Testcase 9439 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9440

Testcase 9440 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9441

Testcase 9441 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9442

Testcase 9442 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9443

Testcase 9443 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9444

Testcase 9444 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9445

Testcase 9445 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9446

Testcase 9446 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9447

Testcase 9447 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9448

Testcase 9448 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9449

Testcase 9449 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9450

Testcase 9450 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9451

Testcase 9451 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9452

Testcase 9452 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9453

Testcase 9453 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9454

Testcase 9454 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9455

Testcase 9455 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9456

Testcase 9456 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9457

Testcase 9457 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9458

Testcase 9458 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9459

Testcase 9459 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9460

Testcase 9460 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 0, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9461

Testcase 9461 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9462

Testcase 9462 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9463

Testcase 9463 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9464

Testcase 9464 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9465

Testcase 9465 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9466

Testcase 9466 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 3, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9467

Testcase 9467 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9468

Testcase 9468 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 4, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9469

Testcase 9469 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9470

Testcase 9470 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 5, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9471

Testcase 9471 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9472

Testcase 9472 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9473

Testcase 9473 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9474

Testcase 9474 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9475

Testcase 9475 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9476

Testcase 9476 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	hostname mismatch
pyca-cryptography-44.0.2	✅	validation failed: leaf certificate has no matching subjectAltName (encountered processing , ...)>)
openssl-1.1	✅	Hostname mismatch
openssl-3.4.1	✅	hostname mismatch
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	hostname mismatch
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	hostname mismatch
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9477

Testcase 9477 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9478

Testcase 9478 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 9, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9479

Testcase 9479 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9480

Testcase 9480 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 10, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9481

Testcase 9481 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9482

Testcase 9482 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 11, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9483

Testcase 9483 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9484

Testcase 9484 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 12, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9485

Testcase 9485 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9486

Testcase 9486 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 13, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9487

Testcase 9487 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9488

Testcase 9488 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 14, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9489

Testcase 9489 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::nameconstraints::tc9490

Testcase 9490 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: ASN.1 parsing error: unexpected tag (got Tag { value: 15, constructed: false, class: ContextSpecific }) (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	N/A
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc0

Testcase 0 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc1

Testcase 1 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc2

Testcase 2 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.4.1	❌ (unexpected failure)	unable to get local issuer certificate
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	unable to get local issuer certificate
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc3

Testcase 3 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2025-05-29T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	certificate has expired
rustls-webpki	✅	CertExpired { time: UnixTime(1748538645), not_after: UnixTime(1748538644) }
rust-webpki	✅	CertExpired
openssl-3.0.16	✅	certificate has expired
pyca-cryptography-44.0.2	✅	validation failed: cert is not valid at validation time (encountered processing , ...)>)
openssl-1.1	✅	certificate has expired
openssl-3.4.1	✅	certificate has expired
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate chain uses expired certificate. The name in the certificate does not match the expected.
openssl-3.3.3	✅	certificate has expired
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 expired 2024-05-28 16:10:44Z
openssl-3.2.4	✅	certificate has expired
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc4

Testcase 4 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc5

Testcase 5 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	RequiredEkuNotFound
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: required EKU not found
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate chain does not match the intended purpose. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	❌ (unexpected success)	N/A
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc6

Testcase 6 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	invalid CA certificate
rustls-webpki	✅	EndEntityUsedAsCa
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	invalid CA certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: Certificate is missing required extension
openssl-1.1	✅	invalid CA certificate
openssl-3.4.1	✅	invalid CA certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	invalid CA certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 is not a CA
openssl-3.2.4	✅	invalid CA certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc7

Testcase 7 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	invalid CA certificate
rustls-webpki	✅	EndEntityUsedAsCa
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	invalid CA certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: basicConstraints.cA must be asserted in a CA certificate
openssl-1.1	✅	invalid CA certificate
openssl-3.4.1	✅	invalid CA certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	invalid CA certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 is not a CA
openssl-3.2.4	✅	invalid CA certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc8

Testcase 8 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	CA signature digest algorithm too weak
rustls-webpki	✅	UnsupportedSignatureAlgorithm
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	CA signature digest algorithm too weak
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: Forbidden signature algorithm: AlgorithmIdentifier { oid: DefinedByMarker(PhantomData), params: Other(ObjectIdentifier { oid: 1.2.840.10045.4.1 }, None) }
openssl-1.1	✅	CA signature digest algorithm too weak
openssl-3.4.1	✅	CA signature digest algorithm too weak
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate chain uses insecure algorithm. The name in the certificate does not match the expected.
openssl-3.3.3	✅	CA signature digest algorithm too weak
certvalidator-0.11.1	✅	The path could not be validated because the signature of intermediate certificate 1 uses the weak hash algorithm sha1
openssl-3.2.4	✅	CA signature digest algorithm too weak
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc9

Testcase 9 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc10

Testcase 10 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2025-05-29T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	certificate has expired
rustls-webpki	✅	CertExpired { time: UnixTime(1748538645), not_after: UnixTime(1748538644) }
rust-webpki	✅	CertExpired
openssl-3.0.16	✅	certificate has expired
pyca-cryptography-44.0.2	✅	validation failed: cert is not valid at validation time (encountered processing , ...)>)
openssl-1.1	✅	certificate has expired
openssl-3.4.1	✅	certificate has expired
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate chain uses expired certificate. The name in the certificate does not match the expected.
openssl-3.3.3	✅	certificate has expired
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 expired 2024-05-28 16:10:44Z
openssl-3.2.4	✅	certificate has expired
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc11

Testcase 11 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc12

Testcase 12 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	RequiredEkuNotFound
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: required EKU not found
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate chain does not match the intended purpose. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	❌ (unexpected success)	N/A
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc13

Testcase 13 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	invalid CA certificate
rustls-webpki	✅	EndEntityUsedAsCa
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	invalid CA certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: Certificate is missing required extension
openssl-1.1	✅	invalid CA certificate
openssl-3.4.1	✅	invalid CA certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	invalid CA certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 is not a CA
openssl-3.2.4	✅	invalid CA certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc14

Testcase 14 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	invalid CA certificate
rustls-webpki	✅	EndEntityUsedAsCa
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	invalid CA certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: basicConstraints.cA must be asserted in a CA certificate
openssl-1.1	✅	invalid CA certificate
openssl-3.4.1	✅	invalid CA certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	invalid CA certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 is not a CA
openssl-3.2.4	✅	invalid CA certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc15

Testcase 15 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	CA signature digest algorithm too weak
rustls-webpki	✅	UnsupportedSignatureAlgorithm
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	CA signature digest algorithm too weak
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: Forbidden signature algorithm: AlgorithmIdentifier { oid: DefinedByMarker(PhantomData), params: Other(ObjectIdentifier { oid: 1.2.840.10045.4.1 }, None) }
openssl-1.1	✅	CA signature digest algorithm too weak
openssl-3.4.1	✅	CA signature digest algorithm too weak
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate chain uses insecure algorithm. The name in the certificate does not match the expected.
openssl-3.3.3	✅	CA signature digest algorithm too weak
certvalidator-0.11.1	✅	The path could not be validated because the signature of intermediate certificate 1 uses the weak hash algorithm sha1
openssl-3.2.4	✅	CA signature digest algorithm too weak
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc16

Testcase 16 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc17

Testcase 17 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc18

Testcase 18 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The certificate chain does not match the intended purpose. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc19

Testcase 19 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc20

Testcase 20 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc21

Testcase 21 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc22

Testcase 22 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc23

Testcase 23 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.4.1	❌ (unexpected failure)	unable to get local issuer certificate
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	unable to get local issuer certificate
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc24

Testcase 24 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc25

Testcase 25 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc26

Testcase 26 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc27

Testcase 27 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc28

Testcase 28 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc29

Testcase 29 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc30

Testcase 30 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.4.1	❌ (unexpected failure)	unable to get local issuer certificate
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	unable to get local issuer certificate
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc31

Testcase 31 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.4.1	❌ (unexpected failure)	unable to get local issuer certificate
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	unable to get local issuer certificate
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc32

Testcase 32 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.4.1	❌ (unexpected failure)	unable to get local issuer certificate
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The certificate chain does not match the intended purpose. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	unable to get local issuer certificate
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc33

Testcase 33 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.4.1	❌ (unexpected failure)	unable to get local issuer certificate
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	unable to get local issuer certificate
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc34

Testcase 34 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.4.1	❌ (unexpected failure)	unable to get local issuer certificate
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	unable to get local issuer certificate
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc35

Testcase 35 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.4.1	❌ (unexpected failure)	unable to get local issuer certificate
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	unable to get local issuer certificate
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc36

Testcase 36 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2025-05-29T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	CertExpired { time: UnixTime(1748538645), not_after: UnixTime(1748538644) }
rust-webpki	✅	CertExpired
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: cert is not valid at validation time (encountered processing , ...)>)
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate chain uses expired certificate. The name in the certificate does not match the expected.
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 expired 2024-05-28 16:10:44Z
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc37

Testcase 37 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	permitted subtree violation
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: all candidates exhausted with no interior errors
openssl-1.1	✅	permitted subtree violation
openssl-3.4.1	✅	permitted subtree violation
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	permitted subtree violation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc38

Testcase 38 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected success)	N/A
rustls-webpki	✅	RequiredEkuNotFound
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	❌ (unexpected success)	N/A
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: all candidates exhausted with no interior errors
openssl-1.1	❌ (unexpected success)	N/A
openssl-3.4.1	❌ (unexpected success)	N/A
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate chain does not match the intended purpose. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected success)	N/A
certvalidator-0.11.1	❌ (unexpected success)	N/A
openssl-3.2.4	❌ (unexpected success)	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc39

Testcase 39 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	invalid CA certificate
rustls-webpki	✅	EndEntityUsedAsCa
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	invalid CA certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: all candidates exhausted with no interior errors
openssl-1.1	✅	invalid CA certificate
openssl-3.4.1	✅	invalid CA certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	invalid CA certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 is not a CA
openssl-3.2.4	✅	invalid CA certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc40

Testcase 40 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	invalid CA certificate
rustls-webpki	✅	EndEntityUsedAsCa
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	invalid CA certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: all candidates exhausted with no interior errors
openssl-1.1	✅	invalid CA certificate
openssl-3.4.1	✅	invalid CA certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The name in the certificate does not match the expected.
openssl-3.3.3	✅	invalid CA certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 is not a CA
openssl-3.2.4	✅	invalid CA certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc41

Testcase 41 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	CA signature digest algorithm too weak
rustls-webpki	✅	UnsupportedSignatureAlgorithm
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	CA signature digest algorithm too weak
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: all candidates exhausted with no interior errors
openssl-1.1	✅	CA signature digest algorithm too weak
openssl-3.4.1	✅	CA signature digest algorithm too weak
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate chain uses insecure algorithm. The name in the certificate does not match the expected.
openssl-3.3.3	✅	CA signature digest algorithm too weak
certvalidator-0.11.1	✅	The path could not be validated because the signature of intermediate certificate 1 uses the weak hash algorithm sha1
openssl-3.2.4	✅	CA signature digest algorithm too weak
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc42

Testcase 42 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2025-05-29T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	CertExpired { time: UnixTime(1748538645), not_after: UnixTime(1748538644) }
rust-webpki	✅	CertExpired
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: cert is not valid at validation time (encountered processing , ...)>)
openssl-1.1	✅	certificate has expired
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate chain uses expired certificate. The name in the certificate does not match the expected.
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 expired 2024-05-28 16:10:44Z
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc43

Testcase 43 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc44

Testcase 44 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	RequiredEkuNotFound
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: required EKU not found
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate chain does not match the intended purpose. The name in the certificate does not match the expected.
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	❌ (unexpected success)	N/A
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc45

Testcase 45 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	EndEntityUsedAsCa
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: Certificate is missing required extension
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 is not a CA
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc46

Testcase 46 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	EndEntityUsedAsCa
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: basicConstraints.cA must be asserted in a CA certificate
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 is not a CA
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc47

Testcase 47 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	UnsupportedSignatureAlgorithm
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: Forbidden signature algorithm: AlgorithmIdentifier { oid: DefinedByMarker(PhantomData), params: Other(ObjectIdentifier { oid: 1.2.840.10045.4.1 }, None) }
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate chain uses insecure algorithm. The name in the certificate does not match the expected.
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because the signature of intermediate certificate 1 uses the weak hash algorithm sha1
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc48

Testcase 48 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc49

Testcase 49 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc50

Testcase 50 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc51

Testcase 51 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate chain does not match the intended purpose. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc52

Testcase 52 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	invalid CA certificate
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	invalid CA certificate
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	invalid CA certificate
openssl-3.4.1	❌ (unexpected failure)	invalid CA certificate
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	invalid CA certificate
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	invalid CA certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc53

Testcase 53 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	invalid CA certificate
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	invalid CA certificate
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	invalid CA certificate
openssl-3.4.1	❌ (unexpected failure)	invalid CA certificate
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	invalid CA certificate
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	invalid CA certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc54

Testcase 54 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	CA signature digest algorithm too weak
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	CA signature digest algorithm too weak
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	CA signature digest algorithm too weak
openssl-3.4.1	❌ (unexpected failure)	CA signature digest algorithm too weak
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate chain uses insecure algorithm. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	CA signature digest algorithm too weak
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	CA signature digest algorithm too weak
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc55

Testcase 55 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc56

Testcase 56 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
openssl-3.4.1	❌ (unexpected failure)	permitted subtree violation
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	permitted subtree violation
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	permitted subtree violation
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc57

Testcase 57 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	N/A
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	✅	N/A
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	✅	N/A
openssl-3.4.1	✅	N/A
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate chain does not match the intended purpose. The name in the certificate does not match the expected.
openssl-3.3.3	✅	N/A
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	✅	N/A
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc58

Testcase 58 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	invalid CA certificate
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	invalid CA certificate
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	invalid CA certificate
openssl-3.4.1	❌ (unexpected failure)	invalid CA certificate
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is not a CA. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	invalid CA certificate
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	invalid CA certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc59

Testcase 59 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	invalid CA certificate
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	invalid CA certificate
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	invalid CA certificate
openssl-3.4.1	❌ (unexpected failure)	invalid CA certificate
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is not a CA. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	invalid CA certificate
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	invalid CA certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc60

Testcase 60 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	CA signature digest algorithm too weak
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	CA signature digest algorithm too weak
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	CA signature digest algorithm too weak
openssl-3.4.1	❌ (unexpected failure)	CA signature digest algorithm too weak
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate chain uses insecure algorithm. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	CA signature digest algorithm too weak
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	CA signature digest algorithm too weak
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc61

Testcase 61 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.4.1	❌ (unexpected failure)	unable to get local issuer certificate
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	unable to get local issuer certificate
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc62

Testcase 62 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.4.1	❌ (unexpected failure)	unable to get local issuer certificate
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	unable to get local issuer certificate
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc63

Testcase 63 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.4.1	❌ (unexpected failure)	unable to get local issuer certificate
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	unable to get local issuer certificate
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc64

Testcase 64 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.4.1	❌ (unexpected failure)	unable to get local issuer certificate
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	unable to get local issuer certificate
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc65

Testcase 65 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.4.1	❌ (unexpected failure)	unable to get local issuer certificate
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	unable to get local issuer certificate
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc66

Testcase 66 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.4.1	❌ (unexpected failure)	unable to get local issuer certificate
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	unable to get local issuer certificate
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc67

Testcase 67 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.4.1	❌ (unexpected failure)	unable to get local issuer certificate
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	unable to get local issuer certificate
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc68

Testcase 68 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
rust-webpki	✅	N/A
openssl-3.0.16	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	N/A
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.4.1	❌ (unexpected failure)	unable to get local issuer certificate
gnutls-certtool-3.8.3	❌ (unexpected failure)	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	❌ (unexpected failure)	unable to get local issuer certificate
certvalidator-0.11.1	✅	N/A
openssl-3.2.4	❌ (unexpected failure)	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc69

Testcase 69 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2025-05-29T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	CertExpired { time: UnixTime(1748538646), not_after: UnixTime(1748538645) }
rust-webpki	✅	CertExpired
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: cert is not valid at validation time (encountered processing , ...)>)
openssl-1.1	✅	certificate has expired
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate chain uses expired certificate. The name in the certificate does not match the expected.
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 expired 2025-05-29 17:10:45Z
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc70

Testcase 70 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc71

Testcase 71 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	RequiredEkuNotFound
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: required EKU not found
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	❌ (unexpected success)	N/A
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc72

Testcase 72 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	EndEntityUsedAsCa
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: Certificate is missing required extension
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 is not a CA
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc73

Testcase 73 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	EndEntityUsedAsCa
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: basicConstraints.cA must be asserted in a CA certificate
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 is not a CA
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc74

Testcase 74 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	UnsupportedSignatureAlgorithm
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: Forbidden signature algorithm: AlgorithmIdentifier { oid: DefinedByMarker(PhantomData), params: Other(ObjectIdentifier { oid: 1.2.840.10045.4.1 }, None) }
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because the signature of intermediate certificate 6 uses the weak hash algorithm sha1
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc75

Testcase 75 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2025-05-29T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	CertExpired { time: UnixTime(1748538646), not_after: UnixTime(1748538645) }
rust-webpki	✅	CertExpired
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: cert is not valid at validation time (encountered processing , ...)>)
openssl-1.1	✅	certificate has expired
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate chain uses expired certificate. The name in the certificate does not match the expected.
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 expired 2024-05-28 16:10:45Z
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc76

Testcase 76 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	NameConstraintViolation
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: no permitted name constraints matched SAN
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 contains the following unsupported critical extension: name_constraints
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc77

Testcase 77 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	RequiredEkuNotFound
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: required EKU not found
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	❌ (unexpected success)	N/A
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc78

Testcase 78 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	EndEntityUsedAsCa
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: Certificate is missing required extension
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 is not a CA
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc79

Testcase 79 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	EndEntityUsedAsCa
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: basicConstraints.cA must be asserted in a CA certificate
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 is not a CA
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A

bettertls::pathbuilding::tc80

Testcase 80 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
openssl-3.1.8	✅	unable to get local issuer certificate
rustls-webpki	✅	UnsupportedSignatureAlgorithm
rust-webpki	✅	UnknownIssuer
openssl-3.0.16	✅	unable to get local issuer certificate
pyca-cryptography-44.0.2	✅	validation failed: candidates exhausted: Forbidden signature algorithm: AlgorithmIdentifier { oid: DefinedByMarker(PhantomData), params: Other(ObjectIdentifier { oid: 1.2.840.10045.4.1 }, None) }
openssl-1.1	✅	unable to get local issuer certificate
openssl-3.4.1	✅	unable to get local issuer certificate
gnutls-certtool-3.8.3	✅	Chain verification output: Not verified. The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected.
openssl-3.3.3	✅	unable to get local issuer certificate
certvalidator-0.11.1	✅	The path could not be validated because the signature of intermediate certificate 1 uses the weak hash algorithm sha1
openssl-3.2.4	✅	unable to get local issuer certificate
gocryptox509-go1.23.7	✅	N/A